Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM InfoSphere Master Data Management Server (CVE-2016-0475, CVE-2016-0466, CVE-2015-7575, CVE-2016-0448)

Summary IBM WebSphere Application Server is shipped as a component of IBM InfoSphere Master Data Management Server . Information about a security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM InfoSphere Master Data Management Server (CVE-2016-2108 CVE-2016-2107 CVE-2016-2105 CVE-2016-2106 CVE-2016-2109 CVE-2016-2176)

Summary IBM WebSphere Application Server is shipped as a component of IBM InfoSphere Master Data Management Server . Information about a security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bullet...

CVE-2020-4675: Cross-Site Request Forgery (CSRF)

IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186324...

PT-2017-12323

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 10.0 through 11.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

CVE-2017-1199: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within...

PT-2017-10282

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 10.1 through 11.6 Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting actions...

PT-2017-10283

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 11.0 through 11.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

PT-2017-10284

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 11.0 through 11.6 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

PT-2017-10286

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, 11.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

CVE-2016-9719: Improper Input Validation

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click...

CVE-2016-9714: Cross-Site Request Forgery (CSRF)

IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119727...

CVE-2016-9716: Cross-Site Request Forgery (CSRF)

IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119729...

CVE-2016-9718: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within...

PT-2017-10287

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, 11.6 Description The issue allows a remote attacker to hijack the clicking action of the victim. This can be achieved by persuading a victim to visit a malicio...

CVE-2016-9715: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

PT-2017-12913

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server versions 11.0 through 11.6 Description The issue allows a local user to read user credentials stored in plain text. Recommendations For IBM InfoSphere Master Data Management Server versions 11.0...

CVE-2017-1309: Cleartext Storage of Sensitive Information

IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463...

CVE-2014-8897: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-8898: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

PT-2014-8748

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server for Product Information Management versions 9.x through 9.1 InfoSphere Master Data Management - Collaborative Edition versions 10.x through 10.1 InfoSphere Master Data Management - Collaborative...