PT-2016-3797

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management versions 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted...

CVE-2015-7492: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Reference Data Management RDM in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

IBM InfoSphere Master Data Management Reference Data Management Component Elevation of Privilege Vulnerability

IBM InfoSphere Master Data Management MDM is a suite of solutions from IBM in the United States to help organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts.Reference Data Management is one of the Reference Data Management components. . A...

Design/Logic Flaw

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

PT-2015-5513

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management versions 10.1, 11.0, 11.3 before FP3, and 11.4 Description The issue allows remote authenticated users to gain privileges via unknown vectors. This is related to an unspecified vulnerability in the Referen...

CVE-2015-1945: Undefined Security Weakness

Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors...

Xxe

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

CVE-2015-1910: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2015-5500

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 before FP3 IBM InfoSphere Master Data Management MDM versions 11.3 Description A cross-site scripting XSS issue exists i...

PT-2015-5499

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management MDM versions 10.1 through 10.1 before IF1 IBM InfoSphere Master Data Management MDM versions 11.0 through 11.0 before FP3 IBM InfoSphere Master Data Management MDM version 11.3 IBM InfoSphere Master Data...

CVE-2015-1909: Exposure of Sensitive Information to an Unauthorized Actor

The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management MDM 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity...

Unspecified Cross-Site Scripting Vulnerability in IBM InfoSphere MDM Reference Data Management

IBM InfoSphere MDM Reference Data Management provides a range of capabilities essential for seamlessly managing reference data in the information world across different business domains, including comprehensive authoring and lifecycle management capabilities, a version control model, role-based...

Unspecified XXE Injection Vulnerability in IBM InfoSphere MDM Reference Data Management

IBM InfoSphere MDM Reference Data Management provides a range of capabilities essential for seamlessly managing reference data in the information world across different business domains, including comprehensive authoring and lifecycle management capabilities, a version control model, role-based...

CVE-2014-0850: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Master Data Management Reference Data Management RDM Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2014-3892

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Master Data Management Reference Data Management RDM Hub versions 10.1 through 11.0 before 11.0.0.0-MDM-IF008 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, whic...