Unrated severityNVD Advisory· Published Mar 25, 2026· Updated Mar 26, 2026
IBM InfoSphere Information Server is vulnerable to HTTP header injection
CVE-2025-14807
Description
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.
Affected products
1- cpe:2.3:a:ibm:infosphere_information_server:11.7.0.0:*:*:*:*:*:*:*Range: 11.7.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.ibm.com/support/pages/node/7267526mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.