Vulnerability Details CVE-2025-12531
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.5%
CVSS Severity
CVSS v3 Score 7.1
Products affected by CVE-2025-12531
-
cpe:2.3:a:ibm:infosphere_information_server:11.7
-
cpe:2.3:a:ibm:infosphere_information_server:11.7.0.1
-
cpe:2.3:a:ibm:infosphere_information_server:11.7.0.2
-
cpe:2.3:a:ibm:infosphere_information_server:11.7.1