Sensitive Information Disclosure in IBM InfoSphere Information Server

CVE-2025-14808

What is CVE-2025-14808?

A vulnerability exists in IBM InfoSphere Information Server that may allow an attacker to capture sensitive information from the query string using the HTTP GET request method. This exposure could be exploited through man-in-the-middle techniques, facilitating unauthorized access to confidential data. It is crucial that users of affected versions take immediate steps to apply patches and mitigate the risks associated with this vulnerability.

References