CVE-2025-0966 — SQL Injection in IBM Infosphere Information Server

CWE-89 — SQL Injection3 documents3 sources
Severity
7.6HIGHNVD
EPSS
0.1%
top 71.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedJun 25
Latest updateJun 26

Description

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-cfj9-qmj3-2rqr: IBM InfoSphere Information Server 11↗2025-06-26
▶
CVEList
IBM InfoSphere Information Server SQL injection↗2025-06-25
▶
CVE-2025-0966 — SQL Injection in IBM | cvebase