CVE-2025-1138

EPSS 0.24%
Veröffentlicht 15.05.2025 20:11:03
Zuletzt bearbeitet 04.06.2025 20:02:53
Quelle psirt@us.ibm.com
CVE-Watchlists
Login
Unerledigt
Login

IBM Information Server information disclosure

IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Infosphere Information Server Version11.7

Ibm ≫ Infosphere Information Server On Cloud Version11.7

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.141

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@us.ibm.com	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-548 Exposure of Information Through Directory Listing

The product inappropriately exposes a directory listing with an index of all the resources located inside of the directory.

https://www.ibm.com/support/pages/node/7230295

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-1138

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-1138

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-1138

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-1138