What’s Vulnerable › Vulnerabilities

CVE-2012-4818

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-29 · updated 2026-06-16

Description

IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.

Affected products

• IBM InfoSphere Information Server: 8.1, 8.5, 8.7

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78651
• https://www.ibm.com/blogs/psirt/security-bulletin-lack-of-path-restriction-may-allow-access-to-sensitive-data-stored-on-ibm-infosphere-information-server-cve-2012-4818/?lnk=hm
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78651
• https://www.ibm.com/blogs/psirt/security-bulletin-lack-of-path-restriction-may-allow-access-to-sensitive-data-stored-on-ibm-infosphere-information-server-cve-2012-4818/?lnk=hm

Get alerted when CVE-2012-4818 or the next vulnerability affects your stack