CVE-2025-1138

—

CVSS 3.1

4.3 medium

EPSS

<1%p20

Published

May 15, 2025 (May 15, 2025)

Modified

Jun 17, 2026

Description

IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.

Vendors: ibm
Products: infosphere information server, infosphere information server on cloud
Weakness: CWE-548
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.