CVE-2015-1984: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary profiles via unspecified vectors, as demonstrated by discovering usernames for use in brute-force...

IBM InfoSphere Master Data Management Information Disclosure Vulnerability (CNVD-2015-04439)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Collaborative Cross-Site Scripting Vulnerability

IBM InfoSphere Master Data Management MDM Collaborative is a suite of collaborative editing solutions for Product Information Management PIM from IBM USA. A cross-site scripting vulnerability exists in IBM InfoSphere MDM Collaborative. When a user browses the affected site, their browser will...

IBM InfoSphere Master Data Management Information Disclosure Vulnerability (CNVD-2015-04440)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM InfoSphere Master Data Management Reference Data Management Component Elevation of Privilege Vulnerability

IBM InfoSphere Master Data Management MDM is a suite of solutions from IBM in the United States to help organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts.Reference Data Management is one of the Reference Data Management components. . A...

CVE-2015-1945

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2015-1945

IBM InfoSphere Master Data Management Reference Data Management component is affected by CVE-2015-1945. An authenticated attacker can escalate privileges due to an improper authorization check, impacting IBM InfoSphere Reference Data Management versions 10.1, 11.0, 11.3 before FP3, and 11.4. Reme...

PT-2015-5513

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management versions 10.1, 11.0, 11.3 before FP3, and 11.4 Description The issue allows remote authenticated users to gain privileges via unknown vectors. This is related to an unspecified vulnerability in the Referen...

CVE-2015-1945: Undefined Security Weakness

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1909

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

PT-2015-5499

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 through 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 through 11.0 before FP3 IBM InfoSphere Master Data Management MDM version 11.3 IBM InfoSphere Master Data...

PT-2015-5500

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 before FP3 IBM InfoSphere Master Data Management MDM versions 11.3 Description A cross-site scripting XSS issue exists i...

CVE-2015-1910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-1909: Exposure of Sensitive Information to an Unauthorized Actor

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

CVE-2014-8898

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-8897

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

Cross site scripting

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

Cross site scripting

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-8897

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...