What is CVE-2026-1567?

CVE-2026-1567 is a high-severity vulnerability in IBM Infosphere Information Server, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.1/10. Published 2026-03-03.

How severe is CVE-2026-1567?

High severity. CVSS v3 base score is 7.1 out of 10.

XXE in IBM Infosphere Information Server

CVE-2026-1567

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to retrieve sensitive information from the server.

Vulnerability class: XXE (XML External Entity)

EPSS: 0.003 (23.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H.

Affected products

Ibm Infosphere Information Server — versions 11.7.0.0
Ibm Infosphere_information_server

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)

Frequently asked questions

What is CVE-2026-1567?: CVE-2026-1567 is a high-severity vulnerability in IBM Infosphere Information Server, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.1/10. Published 2026-03-03.
How severe is CVE-2026-1567?: High severity. CVSS v3 base score is 7.1 out of 10.