CVE-2025-14808
IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.1EPSS 0.2%KEV nãoPoC —Patch referenciado
Lifecycle
25 Mar 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
IBM · InfoSphere Information ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →