CVE-2015-7424: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Master Data Management MDM - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information by leveraging Catalogs access. IBM X-Force ID: 107780...

CVE-2015-7423: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management MDM - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771...

IBM InfoSphere Master Data Management Security Bypass Vulnerability (CNVD-2017-35510)

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A security vulnerability exists in IBM InfoSphere MDM - Collaborative Edition. An attacker could exploit the vulnerability to downlo...

CVE-2017-1523

IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892...

CVE-2017-1523

IBM InfoSphere Master Data Management – Collaborative Edition 11.5 is affected by CVE-2017-1523, where an unauthenticated user could download reports without valid credentials. The vulnerability affects the Collaboration Server component (11.5) and is documented with a remediation path to apply t...

CVE-2017-1523: Missing Authentication for Critical Function

IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892...

PT-2017-13923

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition version 11.5 Description The issue allows an unauthorized user to download reports without authentication. Recommendations For IBM InfoSphere Master Data Management - Collaborative...

IBM InfoSphere Master Data Management Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative Edition. A remote attacker could exploit this...

Unspecified Vulnerability in IBM InfoSphere Master Data Management Collaborative Edition

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A security vulnerability exists in IBM InfoSphere MDM Collaborative Edition. An attacker could exploit the vulnerability to disclose...

CVE-2015-4960

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

Information disclosure

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, which allows local users to obtain sensitive information by reading cache files...

CVE-2015-4958

CVE-2015-4958 affects IBM InfoSphere Master Data Management Collaborative Edition (MDM CE) 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1. The issue is that browser caching is not properly restricted, allowing local users to read cached files and obta...

CVE-2015-4960

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

PT-2016-3640

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1 through 11.0 before 11.0.0.0 IF11 IBM InfoSphere Master Data Management - Collaborative Edition version 11.3 before 11.3.0.0 IF7 IBM InfoSphere Master Data Management -...

PT-2016-3765

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1, 10.1, 11.0 through 11.0.0.0 IF10, 11.3 through 11.3.0.0 IF6, 11.4 through 11.4.0.3 IF0 Description The issue is related to a cross-site scripting XSS vulnerability in...

PT-2016-3638

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1 through 11.0 before 11.0.0.0 IF11 IBM InfoSphere Master Data Management - Collaborative Edition versions 11.3 before 11.3.0.0 IF7 IBM InfoSphere Master Data Management ...

CVE-2015-7414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to inject arbitrary web script or HTML via a...

CVE-2015-4958: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, which allows local users to obtain sensitive information by reading cache files...

CVE-2015-4960: Undefined Security Weakness

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

IBM InfoSphere Master Data Management - Collaborative Edition Point Hijacking Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A point-and-click hijacking vulnerability exists in IBM InfoSphere MDM - Collaborative Edition, which allows an attacker to construc...