cbcvebase.
CVE-2020-4305
published 2020-07-09

CVE-2020-4305: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of…

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.

Affected

8 ranges
VendorProductVersion rangeFixed in
ibminfosphere_information_server
ibminfosphere_information_server
ibminfosphere_information_server
ibminfosphere_information_server
ibminfosphere_information_server
ibminfosphere_information_server11.7.0.0 – 11.7.1.1
ibminfosphere_information_server_on_cloud
ibminfosphere_information_server_on_cloud11.7.0.0 – 11.7.1.1