CVE-2020-4305

Published: Jul 9, 2020Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 176677.

Affected (5)

Products: Ibm: Infosphere Information Server, Infosphere Information Server On Cloud

Ibm

2 products

Infosphere Information Server

Infosphere Information Server On Cloud

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Information Server	From 11.7.0.0 to 11.7.1.1
Ibm Infosphere Information Server	Version 11.3.0
Ibm Infosphere Information Server	Version 11.5.0
Ibm Infosphere Information Server On Cloud	From 11.7.0.0 to 11.7.1.1
Ibm Infosphere Information Server On Cloud	Version 11.5.0.0