PT-2014-3984

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 11.x before 11.0 FP4 IBM InfoSphere Master Data Management Server for Product Information Management versions 9.0 through 9.1 Description The issue is related ...

CVE-2014-0968: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject...

CVE-2014-0850

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Reference Data Management RDM Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Reference Data Management RDM Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Data Stewardship, 2 Business Admin, and 3 Product interfaces in IBM InfoSphere Master Data Management MDM Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.1...

CVE-2014-0850

The IBM bulletin confirms CVE-2014-0850 affects InfoSphere Master Data Management Reference Data Management Hub versions 10.1 and 11.0, with an XSS flaw allowing remote authenticated users to inject script via a crafted URL. Root cause: unvalidated URL input in the RDM Hub surface. Impact: possib...

CVE-2014-0873: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Data Stewardship, 2 Business Admin, and 3 Product interfaces in IBM InfoSphere Master Data Management MDM Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.1...

CVE-2014-0850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Reference Data Management RDM Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3910

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM Server versions 8.5 before 8.5.0.82 IBM InfoSphere Master Data Management MDM Server versions 9.0.1 before 9.0.1.38 IBM InfoSphere Master Data Management MDM Server versions 9.0.2 before 9.0.2.35 IBM...

PT-2014-3892

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Reference Data Management RDM Hub versions 10.1 through 11.0 before 11.0.0.0-MDM-IF008 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, whic...

CVE-2013-5427

CVE-2013-5427 : IBM InfoSphere Master Data Management — Collaborative Edition (CD Edition) and related MDM Server for PIM are affected by a CSRF vulnerability. The IBM bulletin identifies the affected products/versions as: Collaborative Edition 10.x up to 11.0 (specifically 10.0, 10.1 with FP8, a...

CVE-2013-5427: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of...

PT-2014-2924

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 10.1 FP7 IBM InfoSphere Master Data Management - Collaborative Edition versions 11.0 and earlier IBM InfoSphere Master Data Management Server for Product...

CVE-2013-5426

CVE-2013-5426 affects IBM InfoSphere Master Data Management - Collaborative Edition (11.0, 10.1, 10.0) and IBM InfoSphere Master Data Management Server for Product Information Management (9.0, 9.1). The issue is a session-fixation vulnerability that could allow an authenticated attacker to hijack...

CVE-2013-5426

Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via...

CVE-2013-5426: Improper Authentication

Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via...

PT-2013-5537

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.0 through 10.1 before IF5 IBM InfoSphere Master Data Management - Collaborative Edition version 11.0 before IF1 IBM InfoSphere Master Data Management Server for Product...

CVE-2013-4036: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject...

PT-2013-4805

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Server for Product Information Management versions 9.x before 9.1 FP13 IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x before 10.1 FP7 IBM InfoSphere Master Data Management -...

CVE-2013-0477

Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and...