PT-2025-24596 · Sap · Sap Mdm Server

Name of the Vulnerable Software and Affected Versions: SAP MDM Server affected versions not specified Description: The issue allows an attacker to send specially crafted packets, triggering a memory read access violation in the server process. This causes the server to fail and exit unexpectedly,...

Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to HTTP Parameter Override discovered in MDM User Interface (CVE-2016-9717)

Summary IBM InfoSphere Master Data Management is vulnerable to a HTTP Parameter Override which may produce an anomalous behavior in the application that can be potentially exploited . Vulnerability Details CVEID: CVE-2016-9717 DESCRIPTION: HTTP Parameter Override is identified in IBM Infosphere...

Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to cross-site scripting (XSS) Attack (CVE-2017-1199)

Summary IBM InfoSphere Master Data Management is vulnerable to a cross-site scripting XSS Attack and could allow users to embed arbitrary JavaScript code in the Web UI and lead to disclosure of credentials. Vulnerability Details CVEID: CVE-2017-1199 DESCRIPTION: IBM InfoSphere Master Data...

Design/Logic Flaw

IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click...

CVE-2016-9716

CVE-2016-9716 affects IBM InfoSphere Master Data Management Server versions 11.0, 11.3, 11.4, 11.5, and 11.6. The issue is a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform malicious, unauthorized actions on behalf of a trusted user. The IBM security bullet...

Optional VPP Apps show "Mismatch between user and device iTunes store account hashes"

The following error is seen when inspecting the Delivery Group details of an Apple device on the MDM server console: "Mismatch between user and device iTunes store account hashes". Attempts to send installation commands for VPP apps from the MDM server to the Apple device can fail. Optional VPP a...

Cross site scripting

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-8897

Summary (CVE-2014-8897, related CVEs): IBM InfoSphere Master Data Management Collaboration Server is affected by cross-site scripting vulnerabilities due to improper validation of user-supplied input. The CVE-2014-8897 issue specifically describes a stored XSS enabling remote authenticated users ...

CVE-2014-8899

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-8898

Cross-site scripting XSS vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1...

CVE-2014-0873

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Data Stewardship, 2 Business Admin, and 3 Product interfaces in IBM InfoSphere Master Data Management MDM Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.1...

CVE-2014-0873

Multiple cross-site request forgery CSRF vulnerabilities in the 1 Data Stewardship, 2 Business Admin, and 3 Product interfaces in IBM InfoSphere Master Data Management MDM Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.1...

CVE-2014-0873

IBM InfoSphere Master Data Management Server is affected by CSRF in the Data Stewardship, Business Admin, and Product interfaces. The issue allows an attacker to hijack a legitimate user’s session by exploiting insufficient CSRF protections. Affected versions: 8.5 before 8.5.0.82; 9.0.1 before 9....

CVE-2013-5427

CVE-2013-5427 : IBM InfoSphere Master Data Management — Collaborative Edition (CD Edition) and related MDM Server for PIM are affected by a CSRF vulnerability. The IBM bulletin identifies the affected products/versions as: Collaborative Edition 10.x up to 11.0 (specifically 10.0, 10.1 with FP8, a...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject...

CVE-2013-4036

CVE-2013-4036 affects IBM InfoSphere Master Data Management products: InfoSphere Master Data Management Server for Product Information Management (PIM) versions 9.0/9.1 and Collaborative Edition (MDMCS) versions 10.0/10.1/11.0. The vulnerability is an XSS due to improper validation of user-suppli...