CVE-2025-14912
Last modified
CVE-2025-14912 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Infosphere Information Server | >= 11.7.0.0, <= 11.7.1.6 |
References
- https://www.ibm.com/support/pages/node/7266698Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-14912?
How severe is CVE-2025-14912?
How do I fix CVE-2025-14912?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-14907The Moderate Selected Posts plugin for WordPress is vulnerab…4.3
- CVE-2025-14908A security flaw has been discovered in JeecgBoot up to 3.9.0…8.1
- CVE-2025-14909A weakness has been identified in JeecgBoot up to 3.9.0. The…8.1
- CVE-2025-1491The WP Posts Carousel plugin for WordPress is vulnerable to …6.4
- CVE-2025-14910A vulnerability was detected in Edimax BR-6208AC 1.02. This …6.5
- CVE-2025-14911User-controlled chunkSize metadata from MongoDB lacks approp…7.1
- CVE-2025-14913The Frontend Post Submission Manager Lite – Frontend Posting…5.3
- CVE-2025-14914IBM WebSphere Application Server Liberty 17.0.0.3 through 26…7.6
- CVE-2025-14915IBM WebSphere Application Server - Liberty 17.0.0.3 through …7.2
- CVE-2025-14917IBM WebSphere Application Server - Liberty 17.0.0.3 through …9.8
- CVE-2025-1492Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.…7.5
- CVE-2025-14920Hugging Face Transformers Perceiver Model Deserialization of…7.8
Are you affected by CVE-2025-14912?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST