Cross site scripting

2017-08-0315:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.3%

JSON

IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674.

CPENameOperatorVersion
infosphere_master_data_management_servereq11.4
infosphere_master_data_management_servereq11.0
infosphere_master_data_management_servereq11.3
infosphere_master_data_management_servereq11.5
infosphere_master_data_management_servereq10.1
infosphere_master_data_management_servereq11.6

Name	Operator	Version
infosphere_master_data_management_server	eq	11.4
infosphere_master_data_management_server	eq	11.0
infosphere_master_data_management_server	eq	11.3
infosphere_master_data_management_server	eq	11.5
infosphere_master_data_management_server	eq	10.1
infosphere_master_data_management_server	eq	11.6