IBM InfoSphere Information Server Server-Side Request Forgery Vulnerability

Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in IBM InfoSphere Information Server versions 11.7.0.0 prior to 11.7.1.6. This vulnerability allows authenticated attackers to send unauthorized requests from the server, which could lead to network enumeration or facilitate other types of attacks.

Impact

Exploitation of this vulnerability could allow an authenticated attacker to send unauthorized requests from the server, potentially leading to network enumeration or other attacks.

Remediation

Users can upgrade to IBM InfoSphere Information Server versions 11.7.1.0, 11.7.1.6, or 11.7.1.6 Service Pack 2. Instructions for downloading these versions are available on the IBM Support website.

Added: Mar 25, 2026, 10:05 PM
Updated: Mar 25, 2026, 10:05 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
0.4
exploitability
4.7
remediation
7.7
relevance
4.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.