CVE-2025-25046

3.7 lowEPSS 0.2%

Low (3.7) in ibm infosphere information server. EPSS 0.2% chance of exploitation in the next 30 days.

IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.

Severity

CVSS 3.1

3.7 low

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2025-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:infosphere_information_server

References

https://www.ibm.com/support/pages/node/7231333

Check your stack JSON