Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Infosphere Master Data Management
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-1380 1 Ibm 1 Infosphere Master Data Management 2019-10-09 4.0 MEDIUM 4.9 MEDIUM
IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077.
CVE-2015-7424 1 Ibm 1 Infosphere Master Data Management 2018-04-20 4.0 MEDIUM 4.3 MEDIUM
IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information by leveraging Catalogs access. IBM X-Force ID: 107780.
CVE-2015-7423 1 Ibm 1 Infosphere Master Data Management 2018-04-19 3.5 LOW 5.4 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771.
CVE-2015-7414 1 Ibm 1 Infosphere Master Data Management 2016-01-20 3.5 LOW 5.4 MEDIUM
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVE-2015-4960 1 Ibm 1 Infosphere Master Data Management 2016-01-20 3.5 LOW 4.1 MEDIUM
IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.