Dan - Stefan Craciun

**Name of the Vulnerable Software and Affected Versions** IBM InfoSphere Information Server version 11.7 **Description** The issue allows a remote attacker to send specially crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database. This is a result of a SQL injection vulnerability. **Recommendations** For IBM InfoSphere Information Server version 11.7, consider restricting access to the database to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the ability to send specially crafted SQL statements to prevent potential attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.