CVE-2026-1567CWE-611

IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability

High · published March 3, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2026-03-03T20:40Z
EPSS history
Timeline
  • 03 MAR 20:40Z
    IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
    cvelistv5