[email protected]CVE-2014-0967

HistoryJul 19, 2014 - 5:09 a.m.

CVE-2014-0967

2014-07-1905:09:00

CWE-79

[email protected]

web.nvd.nist.gov

ibm

infosphere

master data management

xss

vulnerability

gds

nvd

security

cve-2014-0967

5.2 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

27.2%

JSON

Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CPENameOperatorVersion
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq9.1
ibm:infosphere_master_data_management_collaboration_serveribm infosphere master data management collaboration servereq11.0
ibm:infosphere_master_data_management_server_for_product_information_managementibm infosphere master data management server for product information managementeq9.0
ibm:infosphere_master_data_management_collaboration_serveribm infosphere master data management collaboration servereq10.1
ibm:infosphere_master_data_management_collaboration_serveribm infosphere master data management collaboration servereq10.0

CPE	Name	Operator	Version
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	9.1
ibm:infosphere_master_data_management_collaboration_server	ibm infosphere master data management collaboration server	eq	11.0
ibm:infosphere_master_data_management_server_for_product_information_management	ibm infosphere master data management server for product information management	eq	9.0
ibm:infosphere_master_data_management_collaboration_server	ibm infosphere master data management collaboration server	eq	10.1
ibm:infosphere_master_data_management_collaboration_server	ibm infosphere master data management collaboration server	eq	10.0

References

www-01.ibm.com/support/docview.wss?uid=swg21677300

exchange.xforce.ibmcloud.com/vulnerabilities/92882

5.2 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

27.2%

JSON

Related for CVE-2014-0967

cvelist1 prion1 ibm1