CVE-2024-40689: IBM InfoSphere Information Server

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.

Affected products

• IBM InfoSphere Information Server: version 11.7 only
• IBM InfoSphere Information Server On Cloud: version 11.7 only

Published 2024-07-26. Last modified 2026-06-17.