EUVD-2015-7338

Malware in sbrugna...

Security Bulletin: Cross-Site Scripting vulnerability exists in IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2013-4036)

Abstract IBM InfoSphere Master Data Management is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious scripts into a web page which would be executed in a victim's web browser within the...

Security Bulletin: IBM InfoSphere Master Data Management Collaborative Edition affected by Privilege Escalation security vulnerabilities (CVE-2015-7424)

Summary IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to Privilege Escalation. Vulnerability Details CVEID: CVE-2014-7424 DESCRIPTION: Provide sufficient details for someone to tell if they have the problem, but not enough detail that someone with malicious intent...

Security Bulletin: GDS component of IBM InfoSphere Master Data Management Collaborative Edition affected by various security vulnerabilities (CVE-2015-4960, CVE-2015-4958, CVE-2015-7414)

Summary GDS component of IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to Cross-Site Scripting, Caching of HTTP response and Click-Jacking vulnerabilities. Vulnerability Details CVEID: CVE-2015-4960 DESCRIPTION: IBM InfoSphere Master Data Management - Collaborative...

Security Bulletin: IBM InfoSphere Master Data Management Collaborative Edition affected by various security vulnerabilities (CVE-2015-1984, CVE-2015-1968, CVE-2015-1982, CVE-2015-1980)

Summary IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to Privilege Escalation, Cross-Site Scripting, Server Path Disclosure and Click-Jacking vulnerabilities. Vulnerability Details CVEID: CVE-2015-1984 DESCRIPTION: IBM InfoSphere Master Data Management - Collaborativ...

IBM InfoSphere Master Data Management Collaborative Edition Information Disclosure Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

Security Bulletin: IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information.

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. Vulnerability Details CVEID: CVE-2018-1380 DESCRIPTION: IBM InfoSphere Master Data Management ...

Security Bulletin: IBM® InfoSphere® Master Data Management Collaborative Edition is affected by a vulnerability in the IBM Dojo Toolkit (CVE-2014-8917)

Summary Web applications in IBM InfoSphere Master Data Management Collaborative Edition might be subject to cross site scripting vulnerability using file uploader services from the IBM Dojo Toolkit . Vulnerability Details CVEID: CVE-2014-8917 DESCRIPTION: The IBM Dojo Toolkit is vulnerable to cro...

Security Bulletin: Blind SQL Injection vulnerability in GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2014-0966)

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an attacker steal data by exploiting Blind SQL Injection. Vulnerability Details Description: IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to SQL injection. A remote attacker could send...

Security Bulletin: Session Identifier Not Updated vulnerability in GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2014-3009)

Summary IBM InfoSphere Master Data Management - Collaborative Edition does not update the session identifier after a successful authentication. An attacker could exploit this vulnerability to gain unauthorized access to the application by acting as the session created by a regular user...

Security Bulletin: Cross-Site Request Forgery vulnerability in GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2014-0969)

Summary IBM InfoSphere Master Data Management - Collaborative Edition is vulnerable to Cross-Site Request Forgery attacks. Vulnerability Details Description: Due to insufficient safeguards against cross-site request forgery in IBM InfoSphere Master Data Management - Collaborative Edition an...

Security Bulletin: Privilege escalation vulnerability in IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-3063)

Summary A vulnerability in IBM® InfoSphere® Master Data Management - Collaborative Edition might allow an escalation of privilege attack. Vulnerability Details CVE ID: CVE-2014-3063 Description: IBM® InfoSphere® Master Data Management - Collaborative Edition contains a vulnerability that might...

Security Bulletin: Phishing through frames vulnerability in the GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-3009)

Summary IBM® InfoSphere® Master Data Management - Collaborative Edition is vulnerable to phishing through frames vulnerability. Vulnerability Details CVE ID: CVE-2014-3009 Description: IBM® InfoSphere® Master Data Management - Collaborative Edition is vulnerable to phishing through frames. An...

Security Bulletin: Link Injection vulnerability in GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-0970)

Summary Link Injection vulnerabilities can allow an attacker to embed links URLs to an external site or to different pages forms within IBM® InfoSphere® Master Data Management - Collaborative Edition. The links can appear to be valid application links. Clicking a link might cause the user to...

Security Bulletin: Microsoft Windows MHTML Cross Site Scripting Alteration vulnerability in GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-0968)

Summary IBM® InfoSphere® Master Data Management - Collaborative Edition is vulnerable to cross-site scripting that is caused by improper validation of user-supplied input. A remote attacker can use a specially crafted URL to run scripts in a victim's web browser within the security context of the...

Security Bulletin: Cross-site Scripting vulnerability in GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-0967)

Summary IBM® InfoSphere® Master Data Management - Collaborative Edition is vulnerable to cross-site scripting that is caused by improper validation of user-supplied input. A remote attacker can use a specially crafted URL to run scripts in a victim's web browser within the security context of the...

Security Bulletin: Unix File Parameter Alteration vulnerability in GDS component of IBM® InfoSphere® Master Data Management - Collaborative Edition (CVE-2014-3064).

Summary IBM® InfoSphere® Master Data Management - Collaborative Edition is vulnerable to a Unix file parameter alteration vulnerability. This vulnerability might allow unauthorized access to data; specifically, an authorized person might be able to copy files from the InfoSphere MDM - Collaborati...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM InfoSphere Master Data Management MDM - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771...

CVE-2015-7424

CVE-2015-7424 affects IBM InfoSphere Master Data Management Collaborative Edition (MDM-CE) across versions 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5. The IBM bulletin and NVD describe a Privilege Escalation flaw that allows remote authenticated users to bypass access restrictions and obtain sensitive...

IBM InfoSphere Master Data Management Security Bypass Vulnerability (CNVD-2017-35510)

IBM InfoSphere Master Data Management MDM - Collaborative Edition is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A security vulnerability exists in IBM InfoSphere MDM - Collaborative Edition. An attacker could exploit the vulnerability to downlo...