Unauthenticated users can view the content of Confluence blogs and pages (CVE-2017-7415)

The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication by providing a page id or draft id. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the conten...

IBM InfoSphere Master Data Management Collaborative Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative. When a user browses the affected site, their browser will...