CVE-2014-3063

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges v...

CVE-2014-4775

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remo...

Microsoft SQL Server Elevation of Privilege Vulnerability (2984340)

This host is missing an important security update according to Microsoft Bulletin MS14-044. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Cross-site scripting XSS vulnerability in Master Data Services MDS in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability."...

CVE-2014-1820

Cross-site scripting XSS vulnerability in Master Data Services MDS in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "SQL Master Data Services XSS Vulnerability."...

CVE-2014-3009

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct...

CVE-2014-3009

The CVE-2014-3009 issue affects IBM InfoSphere Master Data Management - Collaborative Edition (GDS component) 10.0–11.0 and IBM InfoSphere Master Data Management Server for Product Information Management 9.0–9.1. Root cause: the GDS component does not properly handle FRAME elements, enabling phis...

CVE-2014-3009

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct...

CVE-2014-0968

Cross-site scripting XSS vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject...

Cross site scripting

Cross-site scripting XSS vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject...

Design/Logic Flaw

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter...

CVE-2014-0970

IBM’s Security Bulletin confirms CVE-2014-0970 affects the GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (versions 11.3, 11.0, 10.1 and 10.0) and IBM InfoSphere Master Data Management Server for Product Information Management (versions 9.1 and 9.0). The issue is a...

CVE-2014-0967

IBM InfoSphere Master Data Management - Collaborative Edition (GDS component) and MDM Server for PIM are vulnerable to cross-site scripting (CVE-2014-0967). The issue arises from improper validation of user-supplied input, enabling remote authenticated users to execute arbitrary scripts via a cra...

CVE-2014-0968

CVE-2014-0968 affects IBM InfoSphere Master Data Management - Collaborative Edition (GDS) and MDM Server for Product Information Management. The root cause is improper validation of user-supplied input, enabling cross-site scripting via a crafted URL for an MHTML document. Affected products/versi...

CVE-2014-0968

Cross-site scripting XSS vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject...

CVE-2014-0850

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Reference Data Management RDM Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Reference Data Management RDM Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Data Stewardship, 2 Business Admin, and 3 Product interfaces in IBM InfoSphere Master Data Management MDM Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.1...

CVE-2014-0850

The IBM bulletin confirms CVE-2014-0850 affects InfoSphere Master Data Management Reference Data Management Hub versions 10.1 and 11.0, with an XSS flaw allowing remote authenticated users to inject script via a crafted URL. Root cause: unvalidated URL input in the RDM Hub surface. Impact: possib...

CVE-2013-5427

CVE-2013-5427 : IBM InfoSphere Master Data Management — Collaborative Edition (CD Edition) and related MDM Server for PIM are affected by a CSRF vulnerability. The IBM bulletin identifies the affected products/versions as: Collaborative Edition 10.x up to 11.0 (specifically 10.0, 10.1 with FP8, a...