CVE-2026-1567
IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
- State
- Published
- Severity
- 7.1 High
- Published
- Mar 3, 2026
- Updated
- Mar 3, 2026
- Reserved
- Jan 28, 2026
Description
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.1 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H | ibm |
Weaknesses
- CWE-611 Improper Restriction of XML External Entity Reference
Affected Products
| Product | Versions |
|---|---|
InfoSphere Information ServerIBM |
|
References
- https://www.ibm.com/support/pages/node/7259630vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.