CVE-2026-1567— IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-1567
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM InfoSphere Information Server 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM InfoSphere Information Server是美国国际商业机器（IBM）公司的一套数据整合平台。该平台可用于整合各种渠道获取的数据信息。 IBM InfoSphere Information Server 11.7.0.0至11.7.1.6版本存在代码问题漏洞，该漏洞源于XML外部实体漏洞，可能导致攻击者从服务器检索敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| IBM | InfoSphere Information Server | 11.7.0.0 ~ 11.7.1.6 | cpe:2.3:a:ibm:infosphere_information_server:11.7.0.0:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-1567
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-1567
请登录查看更多情报信息。
Same Patch Batch · IBM · 2026-03-03 · 16 CVEs total
| CVE-2025-14604 | 6.6 MEDIUM | The following vulnerabilities, which may affect IBM Storage Scale when a directory has a s |
| CVE-2025-13616 | 6.5 MEDIUM | DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP re |
| CVE-2026-2606 | 6.5 MEDIUM | IBM webMethods API Management fails to validate user input and enables unauthorized arbitr |
| CVE-2025-13686 | 6.3 MEDIUM | DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime e |
| CVE-2025-13687 | 6.3 MEDIUM | DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime e |
| CVE-2025-13688 | 6.3 MEDIUM | DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime e |
| CVE-2025-36364 | 6.2 MEDIUM | IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request que |
| CVE-2025-13490 | 5.9 MEDIUM | IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime op |
| CVE-2025-36363 | 5.9 MEDIUM | IBM DevOps Plan is vulnerable to Excessive Authentication Attempts |
| CVE-2025-13734 | 5.4 MEDIUM | IBM Engineering Requirements Management DOORS Next could allow an authenticated user to ac |
| CVE-2025-14480 | 5.1 MEDIUM | IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptograph |
| CVE-2025-14923 | 4.7 MEDIUM | IBM WebSphere Application Server Liberty could provide weaker than expected security |
| CVE-2026-1265 | 4.3 MEDIUM | IBM InfoSphere Information Server is vulnerable due to sensitive information written to a |
| CVE-2025-14456 | IBM MQ Appliance uses weaker than expected cryptographic algorithms | |
| CVE-2026-1713 | IBM MQ is affected by an authority vulnerablility |
IV. Related Vulnerabilities
Same product: InfoSphere Information Server
- CVE-2025-14807
IBM InfoSphere Information Server is vulnerable to HTTP head - CVE-2026-1015
IBM InfoSphere Information Server is vulnerable to server-si - CVE-2026-1014
IBM InfoSphere Information Server is vulnerable due to discl - CVE-2026-2483
IBM InfoSphere Information Server Cross-Site Scripting - CVE-2026-2484
IBM InfoSphere Information Server Information Disclosure
Same vendor: IBM
- CVE-2026-1577
IBM® Db2® is vulnerable to a denial of service with a specia - CVE-2025-36122
IBM® Db2® is vulnerable to a denial of service with a specia - CVE-2025-14688
IBM® Db2® is vulnerable to a denial of service when fetching - CVE-2026-2311
IBM i is affected by a privilege escalation vulnerability in - CVE-2025-36180
Inadequate Pod Communication Restrictions, affects watsonx.d
Same weakness: CWE-611
- CVE-2026-41936
Vvveb < 1.0.8.2 XML External Entity Injection via Import - CVE-2026-40682
Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntr - CVE-2026-6501
ILM Informatique jOpenDocument 代码问题漏洞 - CVE-2025-14543
Improper Restriction of XML External Entity Reference vulner - CVE-2024-13971
Arbitrary File Read and Server Side Request Forgery via XML
V. Comments for CVE-2026-1567
No comments yet