PT-2025-26807 · Ibm · Ibm Infosphere Information Server

Published 2025-06-25 · Updated 2025-06-30 · CVE-2025-0966

Positive Technologies (AI Summary)

CVSS v2.0

8.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7

Description: The issue allows a remote attacker to send specially crafted SQL statements, which could enable the attacker to view, add, modify, or delete information in the back-end database. This is a result of the software being vulnerable to SQL injection.

Recommendations: For IBM InfoSphere Information Server version 11.7, consider restricting access to the database to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of SQL statements from remote sources to reduce the vulnerability to SQL injection attacks.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-08061

CVE-2025-0966

Affected Products

Ibm Infosphere Information Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-0966 · Security Note
• https://bdu.fstec.ru/vul/2025-08061 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0966 · Vendor Advisory
• https://t.me/cvenotify/126607 · Telegram Post
• https://t.me/cvetracker/26992 · Telegram Post
• https://twitter.com/threatsbank/status/1938198304397136186 · Twitter Post
• https://ibm.com/support/pages/node/7236613 · Vendor Advisory, Patch
• https://twitter.com/cracbot/status/1939640093381370156 · Twitter Post