CVE-2025-12531 – IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability

CVE ID : CVE-2025-12531

Published : Nov. 3, 2025, 8:17 p.m. | 1 hour, 11 minutes ago

Description : IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…