# Ibm Infosphere Information Server


- [CVE-2009-4240](https://insights.sbomify.com/CVE-2009-4240/): Memory corruption in n/a (critical 10.0)
- [CVE-2022-40752](https://insights.sbomify.com/CVE-2022-40752/): Command injection in InfoSphere DataStage (critical 9.8)
- [CVE-2022-22425](https://insights.sbomify.com/CVE-2022-22425/): Code injection in IBM InfoSphere Information Server (critical 9.8)
- [CVE-2020-27583](https://insights.sbomify.com/CVE-2020-27583/): Deserialization in n/a (critical 9.8)
- [CVE-2012-0204](https://insights.sbomify.com/CVE-2012-0204/): Path traversal in n/a (critical 9.3)
- [CVE-2022-40747](https://insights.sbomify.com/CVE-2022-40747/): XML external entity in IBM InfoSphere Information Server (critical 9.1)
- [CVE-2017-1383](https://insights.sbomify.com/CVE-2017-1383/): XML external entity in InfoSphere Information Server (critical 9.1)
- [CVE-2025-36245](https://insights.sbomify.com/CVE-2025-36245/): IBM InfoSphere Information Server command execution (high 8.8)
- [CVE-2023-32336](https://insights.sbomify.com/CVE-2023-32336/): IBM InfoSphere Information Server code execution (high 8.8)
- [CVE-2022-30608](https://insights.sbomify.com/CVE-2022-30608/): Cross-site request forgery in IBM InfoSphere Information Server (high 8.8)
- [CVE-2018-1701](https://insights.sbomify.com/CVE-2018-1701/): Command injection in InfoSphere Information Server (high 8.5)
- [CVE-2024-51459](https://insights.sbomify.com/CVE-2024-51459/): IBM InfoSphere Server Information command execution (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/infosphere-information-server/