CVE-2018-1845: IBM InfoSphere Governance Catalog

High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days.

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150905.

Affected products

• IBM InfoSphere Governance Catalog: version 11.3 only; version 11.5 only; version 11.7 only
• IBM InfoSphere Information Server: version 11.3 only; version 11.5 only; version 11.7 only
• IBM InfoSphere Information Server Business Glossary: version 9.1 only
• IBM InfoSphere Information Server Metadata Workbench: version 9.1 only
• IBM InfoSphere Information Server On Cloud: version 11.5 only; version 11.7 only

Published 2019-06-17. Last modified 2026-06-17.