CVE-2025-12832 in InfoSphere Information Server

الملخص

بحسب MITRE • 09/12/2025

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Ibm
• حجز: 06/11/2025
• إفشاء: 09/12/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-335073
• CPE: جاهز
• CWE: CWE-918 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.00168
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Finance, Transportation, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-12832
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-12832
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-12832/