CVE-2025-14808: IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
Other sources
InfoSphere Information Server could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14808?
CVE-2025-14808 is rated as a significant vulnerability due to the risk of unauthorized disclosure of sensitive information.
How do I fix CVE-2025-14808?
To remediate CVE-2025-14808, upgrade IBM InfoSphere Information Server to version 11.7.1.7 or later.
What versions of IBM InfoSphere Information Server are affected by CVE-2025-14808?
Versions 11.7.0.0 through 11.7.1.6 of IBM InfoSphere Information Server are affected by CVE-2025-14808.
What type of information may be disclosed in CVE-2025-14808?
CVE-2025-14808 may allow attackers to obtain sensitive information from the query string of an HTTP GET request.
Is there a patch available for CVE-2025-14808?
Yes, IBM has provided a patch to address CVE-2025-14808, which can be found on their support site.