Cross site request forgery (csrf)

Prospecta Master Data Online MDO allows CSRF...

CVE-2018-17789

CVE-2018-17789 affects Prospecta Master Data Online (MDO). Multiple connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability in MDO. CVSS data from NVD indicates a base score of 4.3 (CVSS2.0, MEDIUM) with network attack vector, no confidentiality impact, partial integrity impac...

CVE-2019-0361

SAP Supplier Relationship Management Master Data Management Catalog - SRMMDMCAT, before versions 3.73, 7.31, 7.32 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability...

Security Bulletin: Cross-Site Request Forgery in IBM InfoSphere Master Data Management - Collaborative Edition (CVE-2013-5427)

Summary Due to insufficient safeguards against cross-site request forgery, an attacker can trick a legitimate user into opening a URL that results in an action being taken as that user, potentially without the knowledge of that user. Any actions taken require that the legitimate user be already...

CVE-2018-17790

Prospecta Master Data Online MDO 2.0 has Stored XSS...

CVE-2018-17790

Prospecta Master Data Online MDO 2.0 has Stored XSS...

Cross site scripting

Prospecta Master Data Online MDO 2.0 has Stored XSS...

CVE-2018-17790

Prospecta Master Data Online MDO 2.0 has Stored XSS...

PT-2019-9521 · Prospecta · Prospecta Master Data Online

Name of the Vulnerable Software and Affected Versions: Prospecta Master Data Online MDO version 2.0 Description: The issue is related to Stored XSS. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

Master Data Online Cross-Site Scripting Vulnerability

Master Data Online is a multi-functional data management platform. The platform mainly provides data normalization and data management functions. A cross-site scripting vulnerability exists in Master Data Online version 2.0. The vulnerability stems from the lack of proper validation of client-sid...

GE IC695EDM001 PACSystems RX3i DNP3 Ethernet Master Detection

Binary data 755488.prm...

SAP BW/4HANA Remote Authorization Bypass Vulnerability

SAP BW/4HANA is a data warehouse solution based on SAP HANA from SAP, Germany. The product is able to integrate with SAP or non-SAP applications for real-time data processing. A remote authorization bypass vulnerability exists in SAP BW/4HANA version 1.0 SP08, which stems from the maintenance of...

IBM InfoSphere Master Data Management Collaborative Edition Information Disclosure Vulnerability

IBM InfoSphere Master Data Management MDM is an IBM solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

Design/Logic Flaw

IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077...

CVE-2018-1380

IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077...

Security Bulletin: IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information.

Summary IBM InfoSphere Master Data Management - Collaborative Edition could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. Vulnerability Details CVEID: CVE-2018-1380 DESCRIPTION: IBM InfoSphere Master Data Management ...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - April 2018 - Includes Oracle April 2018 CPU affects IBM InfoSphere Master Data Management

Summary IBM Initiate Master Data Service is vulnerable to Oracle Java SE and Java SE Embedded issues and could allow remote attackers to affect the confidentiality, integrity, and availability. Vulnerability Details CVEID: CVE-2018-2814 DESCRIPTION: An unspecified vulnerability related to the Jav...

SAP SRM MDM Catalog Authentication Bypass Vulnerability

SAP SRM is a supplier relationship management solution from SAP, of which MDM Catalog is a component with catalog content management and purchasing catalog functionality. An authentication bypass vulnerability in SAP SRM MDM Catalog versions 3.73, 7.31, and 7.32, which originates from a failure o...

Security Bulletin: IBM Master Data Management on Cloud is affected by vulnerabilities known as Spectre and Meltdown

Summary IBM Master Data Management on Cloud is affected by the vulnerabilities known as Spectre and Meltdown, which can enable CPU data cache timing to be abused to bypass conventional memory security restrictions to gain access to privileged memory that should be inaccessible. Vulnerability...

Security Bulletin: Mulitiple security vulnerabilities in Apache CXF affects IBM InfoSphere Master Data Management (CVE-2016-6812 CVE-2016-8739 CVE-2017-5653 CVE-2017-5656 CVE-2017-3156)

Summary IBM Initiate Master Data Service is vulnerable to multiple Apache CXF issues and could allow remote attackers to steal a victim's cookie-based authentication credentials and read arbitrary files on the system. Vulnerability Details CVEID: CVE-2016-6812 DESCRIPTION: Apache CXF is vulnerabl...