IBM InfoSphere Master Data Management Security Bypass Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Collaborative Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative. When a user browses the affected site, their browser will...

IBM InfoSphere Master Data Management Information Disclosure Vulnerability (CNVD-2015-04440)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

Resource Data Management Privilege Escalation Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified two vulnerabilities in Resource Data Management’s Data Manager application. Resource Data Management has produced a new version to mitigate these vulnerabilities. These vulnerabilities could be exploited remotely. AFFECTED PRODUCTS Resourc...

IBM InfoSphere Master Data Management Reference Data Management Component Elevation of Privilege Vulnerability

IBM InfoSphere Master Data Management MDM is a suite of solutions from IBM in the United States to help organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts.Reference Data Management is one of the Reference Data Management components. . A...

Design/Logic Flaw

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2015-1945

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2015-1945

IBM InfoSphere Master Data Management Reference Data Management component is affected by CVE-2015-1945. An authenticated attacker can escalate privileges due to an improper authorization check, impacting IBM InfoSphere Reference Data Management versions 10.1, 11.0, 11.3 before FP3, and 11.4. Reme...

PT-2015-5513

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management versions 10.1, 11.0, 11.3 before FP3, and 11.4 Description The issue allows remote authenticated users to gain privileges via unknown vectors. This is related to an unspecified vulnerability in the Referen...

CVE-2015-1945: Undefined Security Weakness

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

Xxe

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

Cross site scripting

Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1909

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

PT-2015-5499

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 through 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 through 11.0 before FP3 IBM InfoSphere Master Data Management MDM version 11.3 IBM InfoSphere Master Data...

CVE-2015-1909: Exposure of Sensitive Information to an Unauthorized Actor

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

CVE-2015-1910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2015-5500

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 before FP3 IBM InfoSphere Master Data Management MDM versions 11.3 Description A cross-site scripting XSS issue exists i...

Unspecified Vulnerability in Suite Agile Engineering Data Management Component in Oracle Supply Chain

Oracle Supply Chain Products Suite is a suite of supply chain solutions that provides value chain planning, value chain execution, and product lifecycle management. An unspecified vulnerability exists in the BAS - Base Component subcomponent of the Oracle Agile Engineering Data Management compone...

CVE-2015-0490

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to BAS - Base Component...