IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Infosphere_information_server | Ibm | 11.7.0.0 (including) | 11.7.1.1 (including) |
| Infosphere_information_server | Ibm | 11.3.0 (including) | 11.3.0 (including) |
| Infosphere_information_server | Ibm | 11.5.0 (including) | 11.5.0 (including) |
| Infosphere_information_server_on_cloud | Ibm | 11.7.0.0 (including) | 11.7.1.1 (including) |
| Infosphere_information_server_on_cloud | Ibm | 11.5.0.0 (including) | 11.5.0.0 (including) |