Volerion logoVolerion
Volerion logoVolerion

IBM InfoSphere Information Server Command Injection Vulnerability Allowing Arbitrary Command Execution

Vulnerability

A command injection vulnerability has been identified in IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6. This vulnerability allows authenticated users to execute arbitrary commands with elevated privileges on the system, stemming from improper validation of user-supplied input.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands with elevated privileges on the affected system.

Remediation

Users can upgrade to IBM InfoSphere Information Server version 11.7.1.0, 11.7.1.6, or 11.7.1.6 Service Pack 1. Instructions for downloading these versions are available on the IBM Support website.

Added: Sep 29, 2025, 11:23 PM
Updated: Sep 29, 2025, 11:23 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
10.0
exploitability
5.2
remediation
7.7
relevance
0.6
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.