CVE-2015-4960

The IBM InfoSphere Master Data Management Collaborative Edition (GDS component) is vulnerable to clickjacking (and related client-side issues) in versions 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1. An attacker could remotely lure an authenticated...

CVE-2023-46187

CVE-2023-46187 affects IBM InfoSphere Master Data Management (MDM) versions 11.6, 12.0, and 14.0. The issue is a stored cross-site scripting vulnerability in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root ca...

CVE-2014-3009

The CVE-2014-3009 issue affects IBM InfoSphere Master Data Management - Collaborative Edition (GDS component) 10.0–11.0 and IBM InfoSphere Master Data Management Server for Product Information Management 9.0–9.1. Root cause: the GDS component does not properly handle FRAME elements, enabling phis...

CVE-2014-0966

IBM InfoSphere Master Data Management - Collaborative Edition (GDS component) and the related Server for Product Information Management are affected by CVE-2014-0966. The vulnerability is an SQL injection (blind) that could allow a remote authenticated attacker to view, add, modify, or delete dat...

CVE-2015-1984

CVE-2015-1984 affects IBM InfoSphere Master Data Management Collaborative Edition (versions 9.1, 10.1, 11.0, 11.3, 11.4) prior to FP03. A remote authenticated user could bypass access control to read other users’ profiles (e.g., usernames) via unspecified vectors, enabling brute-force password ta...

CVE-2015-4958

CVE-2015-4958 affects IBM InfoSphere Master Data Management Collaborative Edition (MDM CE) 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1. The issue is that browser caching is not properly restricted, allowing local users to read cached files and obta...

CVE-2015-1968

IBM InfoSphere Master Data Management Collaborative Edition (versions 9.1, 10.1, 11.0, 11.3, 11.4) is affected by a Cross-Site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker can craft a URL that, when clicked by a victim, execut...

CVE-2015-7414

The CVE-2015-7414 issue affects the GDS component of IBM InfoSphere Master Data Management – Collaborative Edition (versions 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1). It is a Cross-Site Scripting (XSS) vulnerability caused by improper validatio...

CVE-2018-1380

IBM InfoSphere Master Data Management - Collaborative Edition (11.4, 11.5, 11.6) contains a vulnerability where an authenticated user with CA-level access can modify their ca-id to another user, enabling reading of sensitive information. The issue affects the Collaboration Server component; root ...

CVE-2017-1523

IBM InfoSphere Master Data Management – Collaborative Edition 11.5 is affected by CVE-2017-1523, where an unauthenticated user could download reports without valid credentials. The vulnerability affects the Collaboration Server component (11.5) and is documented with a remediation path to apply t...

CVE-2014-3063

IBM InfoSphere Master Data Management - Collaborative Edition (CDE) versions 10.x before 10.1-FP11 and 11.x before 11.0-FP5, and InfoSphere MDM Server for Product Information Management (PIM) 9.x before 9.1-FP15, 10.x, and 11.x before 11.3-IF2 are affected by a local privilege escalation that cou...

CVE-2014-4775

IBM InfoSphere Master Data Management – Collaborative Edition 10.x (before 10.1-FP11) and 11.x (before 11.0-FP5) plus InfoSphere Master Data Management Server for Product Information Management 9.x (before 9.1-FP15) and 10.x/11.x (before 11.3-IF2) are affected by CVE-2014-4775, which describes fa...

CVE-2015-1982

CVE-2015-1982 affects IBM InfoSphere Master Data Management Collaborative Edition versions 9.1, 10.1, 11.0, 11.3, and 11.4 prior to FP03. The vulnerability allows remote authenticated users to obtain sensitive information by sending a crafted request that causes an error message revealing the ful...

CVE-2015-7424

CVE-2015-7424 affects IBM InfoSphere Master Data Management Collaborative Edition (MDM-CE) across versions 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5. The IBM bulletin and NVD describe a Privilege Escalation flaw that allows remote authenticated users to bypass access restrictions and obtain sensitive...

CVE-2014-0969

CVE-2014-0969 affects IBM InfoSphere Master Data Management – Collaborative Edition (GDS component) and the MDM Server for Product Information Management. Vulnerable are Collaborative Edition 10.x–11.x before 11.0-FP5 and MDM Server for PIM 9.x–11.x before 11.3-IF2. Root cause: insufficient CSRF ...

CVE-2015-1980

IBM InfoSphere Master Data Management - Collaborative Edition vulnerable to clickjacking on versions 9.1, 10.1, 11.0, 11.3, 11.4 prior to FP03. Exploitation could allow remote authenticated users to hijack the victim’s click actions via crafted HTTP requests or malicious sites. Affected versions ...

CVE-2015-7423

IBM InfoSphere Master Data Management Collaborative Edition is affected by CVE-2015-7423. The vulnerability is a Cross‑Site Scripting flaw caused by improper validation of user input, enabling remote authenticated users to run arbitrary script in a victim’s browser via a specially crafted URL, po...