CVE-2023-33857
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
IBM InfoSphere Information Server version 11.7 could allow a remote attacker to obtain system information using a specially crafted query, which could aid in further attacks against the system.
Risk Assessment
The risk to the organization is the potential exposure of sensitive information that could be used for more sophisticated attacks.
Recommendation
It is recommended to update to the latest version of the software and to monitor logs for suspicious queries.
Other vulnerabilities in IBM InfoSphere Information Server 11.7
See all- CVE-2017-1469High
IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories.
- CVE-2016-6059High
IBM InfoSphere Information Server is vulnerable to a denial of service caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume all available memory resources.
- CVE-2026-9836Low
IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6 are affected by an information disclosure vulnerability. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-35898Medium
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer.
Original NVD description (English source)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS