CVE-2026-1014

MEDIUM

IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information

Title source: cna
STIX 2.1

Description

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation.

Scores

CVSS v3 6.5
EPSS 0.0002
EPSS Percentile 3.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (2)
IBM/InfoSphere Information Server 11.7.0.0 - 11.7.1.6
ibm/infosphere_information_server 11.7.0.0 - 11.7.1.6
Published Mar 25, 2026
Tracked Since Mar 26, 2026