Code injection

Resource Data Management Data Manager before 2.2 allows remote authenticated users to modify arbitrary passwords via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6468

Cross-site request forgery CSRF vulnerability in Resource Data Management Data Manager before 2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-6468

CVE-2015-6468 is a CSRF vulnerability in Resource Data Management’s Web-based Data Manager, affected versions prior to 2.2. The issue enables an attacker to hijack an authenticated user’s session and perform unintended actions on trusted pages via CSRF vectors (details not specified in the provid...

CVE-2015-6470

Resource Data Management’s Data Manager prior to version 2.2 is affected by a privilege-escalation vulnerability (CWE-269) that allows a valid authenticated user to change passwords for other users, including administrators, via unspecified vectors. Public records indicate remote access and passw...

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

Design/Logic Flaw

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

CVE-2015-1980

IBM InfoSphere Master Data Management - Collaborative Edition vulnerable to clickjacking on versions 9.1, 10.1, 11.0, 11.3, 11.4 prior to FP03. Exploitation could allow remote authenticated users to hijack the victim’s click actions via crafted HTTP requests or malicious sites. Affected versions ...

IBM InfoSphere Master Data Management Information Disclosure Vulnerability (CNVD-2015-04439)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Security Bypass Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Information Disclosure Vulnerability (CNVD-2015-04440)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Collaborative Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative. When a user browses the affected site, their browser will...

Resource Data Management Privilege Escalation Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified two vulnerabilities in Resource Data Management’s Data Manager application. Resource Data Management has produced a new version to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS Resourc...

IBM InfoSphere Master Data Management Reference Data Management Component Elevation of Privilege Vulnerability

IBM InfoSphere Master Data Management MDM is a suite of solutions from IBM in the United States to help organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts.Reference Data Management is one of the Reference Data Management components. . A...

Design/Logic Flaw

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2015-1945

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2015-1945

IBM InfoSphere Master Data Management Reference Data Management component is affected by CVE-2015-1945. An authenticated attacker can escalate privileges due to an improper authorization check, impacting IBM InfoSphere Reference Data Management versions 10.1, 11.0, 11.3 before FP3, and 11.4. Reme...

Xxe

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...