CVE-2022-22373

MEDIUM

IBM InfoSphere Information Server <11.7 - Info Disclosure

Title source: llm

Description

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/pages/node/6600235

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/221323

Scores

CVSS v3 5.4

EPSS 0.0013

EPSS Percentile 32.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

Status published

Products (1)

ibm/infosphere_information_server 11.7

Published Jul 01, 2022

Tracked Since Feb 18, 2026