CVE-2014-0850

2014-03-1614:06:45

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-0850

cross-site scripting

xss vulnerability

ibm infosphere

master data management

rdm hub

nvd

security advisory

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

JSON

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Reference Data Management (RDM) Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

NVD

Node

ibminfosphere_master_data_management_reference_data_management_hubMatch10.1

ibminfosphere_master_data_management_reference_data_management_hubMatch11.0

CPENameOperatorVersion
ibm:infosphere_master_data_management_reference_data_management_hubibm infosphere master data management reference data management hubeq10.1
ibm:infosphere_master_data_management_reference_data_management_hubibm infosphere master data management reference data management hubeq11.0

CPE	Name	Operator	Version
ibm:infosphere_master_data_management_reference_data_management_hub	ibm infosphere master data management reference data management hub	eq	10.1
ibm:infosphere_master_data_management_reference_data_management_hub	ibm infosphere master data management reference data management hub	eq	11.0