CVE-2025-25046CWE-319

IBM InfoSphere Information Server information disclosure

Low · published April 23, 2025

CVSS v3.1
3.7
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

IBM InfoSphere Information Server 11.7 DataStage Flow Designer

transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using man in the middle techniques.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-04-23T22:24Z
EPSS history
Timeline
  • 23 APR 22:24Z
    IBM InfoSphere Information Server information disclosure
    cvelistv5