PT-2026-28126 · Ibm · Ibm Infosphere Information Server

CVE-2025-14807 · Publicado 2026-03-25 · Atualizado 2026-03-26

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6

Description The software is susceptible to HTTP header injection due to inadequate input validation of the HOST headers. This could enable an attacker to perform various attacks against the system, including cross-site scripting, cache poisoning, or session hijacking.

Recommendations Update to a version later than 11.7.1.6.

Correção

Enumeração de Fraquezas

CWE-644

Identificadores relacionados

CVE-2025-14807

Produtos afetados

Ibm Infosphere Information Server

Referências · 5

• https://twitter.com/cyberbivash/status/2036943636055683363 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2037137802907861270 · Publicação no Twitter
• https://ibm.com/support/pages/node/7267526 · Correção, Aviso do Fabricante
• https://twitter.com/infoflowcloud/status/2037139212432990308 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-14807 · Nota de Segurança