Vulnerabilities > CVE-2022-22425 - Improper Neutralization of Formula Elements in a CSV File vulnerability in IBM Infosphere Information Server 11.7

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
ibm
CWE-1236
critical

Summary

"IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."

Vulnerable Configurations

Part Description Count
Application
Ibm
1
OS
Microsoft
1
OS
Linux
1
OS
Ibm
1