{"affected":[{"defaultStatus":"unaffected","product":"InfoSphere Information Server","source":"CNA: ibm","vendor":"IBM","versions":[{"status":"affected","version":"11.7"}]}],"cveId":"CVE-2025-0966","cwes":["CWE-89"],"description":"IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.","epss":{"date":"2026-11-03","percentile":0.26249,"score":0.0033},"exploits":[],"kev":null,"metrics":[{"score":7.6,"severity":"high","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","version":"3.1"}],"modifiedAt":1793742767500,"publishedAt":1750819239889,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7236613"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"InfoSphere Information Server, InfoSphere Information Server on Cloud  11.7.0.0 to 11.7.1.6  DT422417  --Apply InfoSphere Information Server version 11.7.1.0 \n--Apply InfoSphere Information Server version 11.7.1.6\n\n--Apply InfoSphere DataStage security patch\n--For InfoSphere DataStage Flow Designer, a security patch will be published subsequently."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7236613"}],"revision":"6cd6568ae9af12a7c4e26fabf770b0225573493fb0c1626f1af589cdb4039f37","sources":[{"modifiedAt":1793742767500,"name":"CNA: ibm","retrievedAt":1793744123475,"url":"https://www.cve.org/CVERecord?id=CVE-2025-0966"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793747323423,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-0966"}],"ssvc":{"assessedAt":1750910121202,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"IBM InfoSphere Information Server SQL injection","updatedAt":1793747323423}