CVE-2017-1309: Cleartext Storage of Sensitive Information

IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463...

IBM InfoSphere Master Data Management Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative Edition. A remote attacker could exploit this...

CVE-2015-7492

IBM InfoSphere Master Data Management’s Reference Data Management (RDM) is affected by CVE-2015-7492 via improper validation of user-supplied input, enabling cross-site scripting through a specially crafted URL when authenticated remotely. Affected versions include IBM InfoSphere MDM/RDM 10.1, 11...

CVE-2015-7492: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Reference Data Management RDM in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2016-3797

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management versions 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted...

CVE-2015-4960

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2015-4960

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

CVE-2015-4958

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, which allows local users to obtain sensitive information by reading cache files...

CVE-2015-4958: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching, which allows local users to obtain sensitive information by reading cache files...

PT-2016-3640

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1 through 11.0 before 11.0.0.0 IF11 IBM InfoSphere Master Data Management - Collaborative Edition version 11.3 before 11.3.0.0 IF7 IBM InfoSphere Master Data Management -...

CVE-2015-7414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to inject arbitrary web script or HTML via a...

CVE-2015-4960: Undefined Security Weakness

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site...

PT-2016-3765

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1, 10.1, 11.0 through 11.0.0.0 IF10, 11.3 through 11.3.0.0 IF6, 11.4 through 11.4.0.3 IF0 Description The issue is related to a cross-site scripting XSS vulnerability in...

PT-2016-3638

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 9.1 through 11.0 before 11.0.0.0 IF11 IBM InfoSphere Master Data Management - Collaborative Edition versions 11.3 before 11.3.0.0 IF7 IBM InfoSphere Master Data Management ...

IBM InfoSphere Master Data Management - Collaborative Edition Information Disclosure Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A security vulnerability in IBM InfoSphere MDM - Collaborative Edition allows local attackers to exploit the vulnerability to obtain...

IBM InfoSphere Master Data Management - Collaborative Edition Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of solutions that provide collaborative editing for Product Information Management PIM. A cross-site scripting vulnerability in the IBM InfoSphere MDM - Collaborative EditionGDS component allows remote attackers to explo...

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

CVE-2015-1982

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which reveals the full path in an error message...

CVE-2015-1984

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

PT-2015-5521

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Collaborative Edition versions 9.1 through 11.4 before FP03 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web...