CVE-2014-4786

IBM Initiate Master Data Service is affected by CVE-2014-4786 across versions 9.5, 9.7, 10.0, and 10.1. The issue arises from improper restriction of FRAME elements, enabling remote authenticated users to perform frame-injection phishing attacks and potentially bypass access controls or view sens...