wid-sec-w-2026-0851 · Published 2026-03-24 · View on BSI CERT-Bund ↗

IBM InfoSphere Information Server: Multiple Vulnerabilities

CVSS 8.2 HIGH

Risk Summary

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

CVEs (14)

CVE-2025-14790 CVE-2025-14808 CVE-2025-14810 CVE-2025-14912 CVE-2025-14974 CVE-2025-36258 CVE-2025-36422 CVE-2026-1014 CVE-2026-1015 CVE-2026-1262 CVE-2026-24400 CVE-2026-2483 CVE-2026-2484 CVE-2026-2485

Affected Vendors

IBM

Affected Products (1)

IBM · InfoSphere Information Server 11.7.0.0-11.7.1.6

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more