7.1
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Description
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Basic Information
ID
CVE-2025-12531
Source
ibm
Published
Nov 3, 2025 at 19:47
Modified
Nov 3, 2025 at 20:15
Affected Product
Vendor
IBM
Product
InfoSphere Information Server
Version
11.7.0.0
Affected Versions
IBM InfoSphere Information Server 11.7.0.0