CVE-2025-12531
Critical · 9.1CVSS
9.1
EPSS
0.8%
Published
Nov 3, 2025
CISA due date
—
The record
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|