https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1499.htmlhttps://patchthecve.com/cve/CVE-2025-1499.htmlWed, 17 Jun 2026 08:39:15 +0000MEDIUM 6.5: IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user.https://patchthecve.com/cve/CVE-2025-1138.htmlhttps://patchthecve.com/cve/CVE-2025-1138.htmlWed, 17 Jun 2026 08:38:26 +0000MEDIUM 4.3: IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listing.https://patchthecve.com/cve/CVE-2024-40689.htmlhttps://patchthecve.com/cve/CVE-2024-40689.htmlWed, 17 Jun 2026 07:46:21 +0000MEDIUM 6.0: IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.