CVE-2025-25045 MEDIUM

CVE-2025-25045: IBM InfoSphere Information Server information disclosure

Vendor Ibm

Product InfoSphere Information Server

Weakness CWE-209 · Error message info leak

Published April 23, 2025

Last update August 28, 2025

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system.

Key dates

02Disclosure timeline

April 23, 2025 CVE published

August 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-25045 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/209.html

Related vulnerabilities

04Related CVE

CVE-2026-44226 pyLoad: Unauthenticated traceback disclosure via global exception handler in WebUI CVE-2026-29110 Cryptomator: Leaking of cleartext paths into log file in non-debug mode CVE-2026-40969 Spring gRPC AuthenticationException message reflected to remote client CVE-2025-14243 Mirror-registry: openshift mirror registry: user enumeration via authentication error messages CVE-2024-28765 Security vulnerability was found in IBM Security Directory Integrator