PT-2026-28112 · Ibm · Ibm Infosphere Information Server

Published 2026-03-25 · Updated 2026-03-25 · CVE-2025-14974

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6

Description IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by an Insecure Direct Object Reference (IDOR) issue. An IDOR occurs when an application provides direct access to objects based on user-supplied input. This can allow unauthorized access to sensitive data or functionality.

Recommendations Update IBM InfoSphere Information Server to a version later than 11.7.1.6.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-14974

Affected Products

Ibm Infosphere Information Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-14974 · Security Note
• https://twitter.com/CVEnew/status/2036911780258341318 · Twitter Post
• https://ibm.com/support/pages/node/7266723 · Patch, Vendor Advisory