Kritik CVSS 9.1
CVE-2025-12531: Infosphere Information Server: XML dış varlık (XXE)
Açıklama (NVD)
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Özet bilgiler
- Ürün
- Ibm Infosphere Information Server
- CVSS v3.1
- 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H - EPSS
- %0,76 (yüzdelik 55)
- CWE
- CWE-611
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-infosphere-information-server | 11.7 | 11.7.1.6 | — |