DeutschShown in its original language — a full translation is planned for a future version.
IBM InfoSphere Information Server: Mehrere Schwachstellen
view advisory published 2025-09-29
Ein Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-36245US | — | — | ||
IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper v… | ||||
| CVE-2025-53864US | — | — | ||
Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT c… | ||||
| CVE-2025-50182US | medium6.1 | — | ||
urllib3 is a user-friendly HTTP client library for Python. Starting in version 2.2.0 and prior to 2.5.0, urllib3 does not control redirects in browsers and Node.js. urllib3 support… | ||||
| CVE-2025-50181US | medium6.1 | — | ||
urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retrie… | ||||
| CVE-2025-31672US | — | — | ||
Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and… | ||||
| CVE-2024-28168US | — | — | ||
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP.
This issue affects Apache XML Graphics FOP: 2.9.
Users are recommended to… | ||||
| CVE-2010-2245US | high7.4 | — | ||
XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document. | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-2154 - CSAF Versionself
- WID-SEC-2025-2154 - Portal Versionself
- IBM Security Bulletin vom 2025-09-29external
- IBM Security Bulletin vom 2025-09-29external
- IBM Security Bulletin vom 2025-09-29external
- IBM Security Bulletin vom 2025-09-29external
- IBM Security Bulletin vom 2025-09-29external
- IBM Security Bulletin vom 2025-09-29external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan