CVE-2025-36245

IBM InfoSphere Information Server command execution

CVSS 8.8 HIGHEPSS 0.4%CWE-78

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

29 sep 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

IBM · InfoSphere Information Server

Referencias

https://www.ibm.com/support/pages/node/7246170