CVE-2014-3064

CVE-2014-3064 affects IBM InfoSphere Master Data Management - Collaborative Edition (GDS component) and InfoSphere MDM Server for Product Information Management. A remote authenticated user can read arbitrary files via a crafted UNIX file parameter. Affected: Collaborative Edition v10.0/10.1/11.x...

CVE-2013-0478

The CVE-2013-0478 entry describes an XSS vulnerability in IBM InfoSphere Master Data Management – Collaborative Edition (versions 10.0 and 10.1 before FP1) and InfoSphere Master Data Management Server for Product Information Management (versions 6.0, 9.0, 9.1). The flaw allows remote authenticate...

CVE-2014-0970

IBM’s Security Bulletin confirms CVE-2014-0970 affects the GDS component of IBM InfoSphere Master Data Management - Collaborative Edition (versions 11.3, 11.0, 10.1 and 10.0) and IBM InfoSphere Master Data Management Server for Product Information Management (versions 9.1 and 9.0). The issue is a...

CVE-2014-0967

IBM InfoSphere Master Data Management - Collaborative Edition (GDS component) and MDM Server for PIM are vulnerable to cross-site scripting (CVE-2014-0967). The issue arises from improper validation of user-supplied input, enabling remote authenticated users to execute arbitrary scripts via a cra...

CVE-2013-0477

CVE-2013-0477 describes multiple XSS vulnerabilities in IBM InfoSphere Master Data Management – Collaborative Edition (versions 10.0 and 10.1 before FP1) and InfoSphere MDM Server for Product Information Management (PIM) (versions 6.0, 9.0, 9.1). The root cause is unspecified in the provided docu...

CVE-2013-4036

CVE-2013-4036 affects IBM InfoSphere Master Data Management products: InfoSphere Master Data Management Server for Product Information Management (PIM) versions 9.0/9.1 and Collaborative Edition (MDMCS) versions 10.0/10.1/11.0. The vulnerability is an XSS due to improper validation of user-suppli...

CVE-2013-5426

CVE-2013-5426 affects IBM InfoSphere Master Data Management - Collaborative Edition (11.0, 10.1, 10.0) and IBM InfoSphere Master Data Management Server for Product Information Management (9.0, 9.1). The issue is a session-fixation vulnerability that could allow an authenticated attacker to hijack...

CVE-2014-0968

CVE-2014-0968 affects IBM InfoSphere Master Data Management - Collaborative Edition (GDS) and MDM Server for Product Information Management. The root cause is improper validation of user-supplied input, enabling cross-site scripting via a crafted URL for an MHTML document. Affected products/versi...

CVE-2013-5427

CVE-2013-5427 : IBM InfoSphere Master Data Management — Collaborative Edition (CD Edition) and related MDM Server for PIM are affected by a CSRF vulnerability. The IBM bulletin identifies the affected products/versions as: Collaborative Edition 10.x up to 11.0 (specifically 10.0, 10.1 with FP8, a...