CVE-2022-40752

IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:  236687.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@us.ibm.com

Published

2022-11-16

Last modified

2025-07-23

Weaknesses

CWE-77

Affected products

• Infosphere Datastage (Ibm)
• Infosphere Information Server (Ibm)
• Infosphere Information Server On Cloud (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/236687
• https://www.ibm.com/support/pages/node/6833566