CVE Tools
Track your stack

Infosphere Information Server On Cloud

29 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Infosphere Information Server On Cloud, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Infosphere Information Server On Cloud CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Infosphere Information Server On Cloud CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-030
2025-040
2025-051
2025-061
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 29 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical13%
  • High724%
  • Medium2069%
  • Low13%

Latest CVEs

The 15 most recently published vulnerabilities affecting Infosphere Information Server On Cloud.

  1. CVE-2025-1499IBM InfoSphere Information Server information disclosure6.5
  2. CVE-2025-1138IBM Information Server information disclosure4.3
  3. CVE-2024-40689IBM InfoSphere Information Server SQL injection6.0
  4. CVE-2022-40752IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:  236687.9.8
  5. CVE-2022-22442"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."6.5
  6. CVE-2022-22454IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.7.8
  7. CVE-2020-4305IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim...8.8
  8. CVE-2020-4298IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inte...5.4
  9. CVE-2020-4286IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a use...6.5
  10. CVE-2020-4384IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inte...5.4
  11. CVE-2019-4237A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious pag...5.4
  12. CVE-2018-1845IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to ...7.1
  13. CVE-2019-4257IBM InfoSphere Information Server 11.5 and 11.7 is affected by an information disclosure vulnerability. Sensitive information in an error message may be used to conduct further attacks against the ...4.3
  14. CVE-2019-4185IBM InfoSphere Information Server 11.7.1 containers are vulnerable to privilege escalation due to an insecurely configured component. IBM X-Force ID: 158975.8.3
  15. CVE-2019-4220IBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could be used to decrypt sensitive information. IBM X-Force ID: 159229.5.5

Product grouping is registry-driven, with AI assist and human review. How it works