CVE-2026-2484 | IBM InfoSphere Information Server up to 11.7.1.6 information exposure
VulDBArchived Mar 26, 2026✓ Full text saved
A vulnerability classified as problematic was found in IBM InfoSphere Information Server up to 11.7.1.6 . This issue affects some unknown processing. Executing a manipulation can lead to information exposure through error message. This vulnerability is registered as CVE-2026-2484 . It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
Full text archived locally
✦ AI Summary· Claude Sonnet
VDB-353501 · CVE-2026-2484 · GCVE-0-2026-2484
IBM INFOSPHERE INFORMATION SERVER UP TO 11.7.1.6 INFORMATION EXPOSURE
HISTORYDIFFRELATEJSONXMLCTI
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
4.2 $0-$5k 1.93+
Summaryinfo
A vulnerability, which was classified as problematic, has been found in IBM InfoSphere Information Server up to 11.7.1.6. Impacted is an unknown function. The manipulation leads to information exposure. This vulnerability is documented as CVE-2026-2484. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.
Detailsinfo
A vulnerability was found in IBM InfoSphere Information Server up to 11.7.1.6. It has been rated as problematic. This issue affects an unknown functionality. The manipulation with an unknown input leads to a information exposure vulnerability. Using CWE to declare the problem leads to CWE-209. The product generates an error message that includes sensitive information about its environment, users, or associated data. Impacted is confidentiality. The summary by CVE is:
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information exposure vulnerability caused by overly verbose error messages
The advisory is shared at ibm.com. The identification of this vulnerability is CVE-2026-2484 since 02/13/2026. The exploitation is known to be easy. The attack may be initiated remotely. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 03/25/2026). MITRE ATT&CK project uses the attack technique T1592 for this issue.
Upgrading eliminates this vulnerability.
Productinfo
Type
Reporting Software
Vendor
IBM
Name
InfoSphere Information Server
Version
11.7.1.0
11.7.1.1
11.7.1.2
11.7.1.3
11.7.1.4
11.7.1.5
11.7.1.6
License
commercial
Website
Vendor: https://www.ibm.com/
CPE 2.3info
🔒
🔒
🔒
CPE 2.2info
🔒
🔒
🔒
CVSSv4info
VulDB Vector: 🔒
VulDB Reliability: 🔍
CVSSv3info
VulDB Meta Base Score: 4.3
VulDB Meta Temp Score: 4.2
VulDB Base Score: 4.3
VulDB Temp Score: 4.1
VulDB Vector: 🔒
VulDB Reliability: 🔍
CNA Base Score: 4.3
CNA Vector (ibm): 🔒
CVSSv2info
Vector Complexity Authentication Confidentiality Integrity Availability
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploitinginfo
Class: Information exposure
CWE: CWE-209 / CWE-200 / CWE-284
CAPEC: 🔒
ATT&CK: 🔒
Physical: No
Local: No
Remote: Yes
Availability: 🔒
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔒
0-Day Unlock Unlock Unlock Unlock
Today Unlock Unlock Unlock Unlock
Threat Intelligenceinfo
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍
Countermeasuresinfo
Recommended: Upgrade
Status: 🔍
0-Day Time: 🔒
Timelineinfo
02/13/2026 CVE reserved
03/25/2026 +40 days Advisory disclosed
03/25/2026 +0 days VulDB entry created
03/25/2026 +0 days VulDB entry last update
Sourcesinfo
Vendor: ibm.com
Advisory: ibm.com
Status: Confirmed
CVE: CVE-2026-2484 (🔒)
GCVE (CVE): GCVE-0-2026-2484
GCVE (VulDB): GCVE-100-353501
Entryinfo
Created: 03/25/2026 23:02
Changes: 03/25/2026 23:02 (63)
Complete: 🔍
Cache ID: 99:F51:101
Discussion
No comments yet. Languages: en.
Please log in to comment.
◂ PreviousOverviewNext ▸