CVE-2014-8896: Improper Authentication

The Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to modi...

CVE-2014-8898: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

PT-2014-8749

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-4775

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remo...

CVE-2014-0969

Cross-site request forgery CSRF vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote...

Sql injection

SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to...

Design/Logic Flaw

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges v...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote...

CVE-2014-0969

CVE-2014-0969 affects IBM InfoSphere Master Data Management – Collaborative Edition (GDS component) and the MDM Server for Product Information Management. Vulnerable are Collaborative Edition 10.x–11.x before 11.0-FP5 and MDM Server for PIM 9.x–11.x before 11.3-IF2. Root cause: insufficient CSRF ...

CVE-2014-0969

Cross-site request forgery CSRF vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote...

CVE-2014-3063

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges v...

CVE-2014-4775

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remo...

CVE-2014-3063

IBM InfoSphere Master Data Management - Collaborative Edition (CDE) versions 10.x before 10.1-FP11 and 11.x before 11.0-FP5, and InfoSphere MDM Server for Product Information Management (PIM) 9.x before 9.1-FP15, 10.x, and 11.x before 11.3-IF2 are affected by a local privilege escalation that cou...

CVE-2014-4775

IBM InfoSphere Master Data Management – Collaborative Edition 10.x (before 10.1-FP11) and 11.x (before 11.0-FP5) plus InfoSphere Master Data Management Server for Product Information Management 9.x (before 9.1-FP15) and 10.x/11.x (before 11.3-IF2) are affected by CVE-2014-4775, which describes fa...

PT-2014-3982

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 11.x before 11.0-FP5 IBM InfoSphere Master Data Management Server for Product Information Management versions 9.x through 11.x before 11.3-IF2 Description The...

PT-2014-3985

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 11.x before 11.0-FP5 IBM InfoSphere Master Data Management Server for Product Information Management versions 9.x through 11.x before 11.3-IF2 Description A...

CVE-2014-3063: Undefined Security Weakness

IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges v...

PT-2014-6112

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x through 10.1 before 10.1-FP11 IBM InfoSphere Master Data Management - Collaborative Edition versions 11.x through 11.0 before 11.0-FP5 IBM InfoSphere Master Data...

PT-2014-5057

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x before 10.1-FP11 IBM InfoSphere Master Data Management - Collaborative Edition versions 11.x before 11.0-FP5 IBM InfoSphere Master Data Management Server for Product...

CVE-2014-0966: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to...