CVE-2022-22373

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead to creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. IBM X-Force ID: 221323.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected software

Vendor	Product	Versions
IBM	InfoSphere Information Server	11.7

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/221323VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6600235Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/221323VDB Entry, Vendor Advisory
https://www.ibm.com/support/pages/node/6600235Patch, Vendor Advisory

Timeline

Published: Jul 1, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-223749.1The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to ope CVE-2022-223758.8IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary commands on the system by se CVE-2022-223775.3IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to prope CVE-2022-22386.5A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filte CVE-2022-223804.3IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. CVE-2022-223844.3IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due to hazardous input va CVE-2022-223857.5IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmission of data in clear CVE-2022-223865.9IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to prope CVE-2022-223875.4IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web CVE-2022-223896.5IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnorma CVE-2022-22394.8The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privilege users such as a CVE-2022-223907.5IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an information disclosure caused by improper privil