Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe

Filtered by product Infosphere Master Data Management Collaboration Server

Total 9 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2014-3064	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	6.3 MEDIUM	N/A
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter.
CVE-2014-0970	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	3.5 LOW	N/A
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors.
CVE-2014-0968	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	3.5 LOW	N/A
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL for an MHTML document.
CVE-2014-0967	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	3.5 LOW	N/A
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVE-2013-5427	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	6.8 MEDIUM	N/A
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of arbitrary users.
CVE-2013-5426	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	4.9 MEDIUM	N/A
Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via unspecified vectors.
CVE-2013-4036	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	3.5 LOW	N/A
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0478	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	3.5 LOW	N/A
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0477	1 Ibm	2 Infosphere Master Data Management Collaboration Server, Infosphere Master Data Management Server For Product Information Management	2024-11-21	6.0 MEDIUM	N/A
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.