PT-2026-28126 · Ibm · Ibm Infosphere Information Server

Published 2026-03-25 · Updated 2026-03-26 · CVE-2025-14807

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6

Description The software is susceptible to HTTP header injection due to inadequate input validation of the HOST headers. This could enable an attacker to perform various attacks against the system, including cross-site scripting, cache poisoning, or session hijacking.

Recommendations Update to a version later than 11.7.1.6.

Fix

Weakness Enumeration

CWE-644

Related Identifiers

CVE-2025-14807

Affected Products

Ibm Infosphere Information Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-14807 · Security Note
• https://twitter.com/cyberbivash/status/2036943636055683363 · Twitter Post
• https://twitter.com/CVEnew/status/2037137802907861270 · Twitter Post
• https://ibm.com/support/pages/node/7267526 · Patch, Vendor Advisory
• https://twitter.com/infoflowcloud/status/2037139212432990308 · Twitter Post