What’s Vulnerable › Vulnerabilities
CVE-2025-36245: IBM InfoSphere Information Server command execution
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-29 · updated 2026-10-09
- Weakness: CWE-78
Description
IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
Affected products
- IBM InfoSphere Information Server: from 11.7 through 11.7.1.6
References
Get alerted when CVE-2025-36245 or the next vulnerability affects your stack