PT-2026-28109 · Ibm · Ibm Infosphere Information Server

Published 2026-03-25 · Updated 2026-03-25 · CVE-2025-14808

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6

Description The software may allow an attacker to obtain sensitive information from the query string of an HTTP GET method. This information could be obtained using man-in-the-middle techniques. The affected software processes requests using data from the query string.

Recommendations Update to a version later than 11.7.1.6.

Fix

Weakness Enumeration

CWE-598

Related Identifiers

CVE-2025-14808

Affected Products

Ibm Infosphere Information Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-14808 · Security Note
• https://twitter.com/CVEnew/status/2036911793214546128 · Twitter Post
• https://ibm.com/support/pages/node/7266695 · Patch, Vendor Advisory