CVE-2022-40747EPSS p56.1%
CVE-2022-40747CVE-2022-40747
ibm / infosphere_information_server
Description
"IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 236584."
Scoring
| CVSS | 9.1 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
| EPSS | 0.93% probability of exploitation · percentile 56.1% · 2026-06-19T12:03:05Z |
| Last modified | 2026-06-17 |