CVE-2025-1138CWE-548

IBM Information Server information disclosure

Medium · published May 15, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.9th percentile
Weakness
CWE-548 · Exposure of Information Through Directory Listing
Published
2025-05-15T20:11Z
EPSS history
Timeline
  • 15 MAY 20:11Z
    IBM Information Server information disclosure
    cvelistv5