CVE Catalog

CVE-2023-33857

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.55%

42th percentile - higher than 42% of all known CVEs

Summary

IBM InfoSphere Information Server version 11.7 could allow a remote attacker to obtain system information using a specially crafted query, which could aid in further attacks against the system.

Risk Assessment

The risk to the organization is the potential exposure of sensitive information that could be used for more sophisticated attacks.

Recommendation

It is recommended to update to the latest version of the software and to monitor logs for suspicious queries.

Original NVD description (English source)

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS