CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2015-1945
https://notcve.org/view.php?id=CVE-2015-1945
02 Jun 2015 — Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors. Vulnerabilidad no especificada en el componente Reference Data Management en IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 anterior a FP3, y 11.4 permite a usuarios remotos autenticados ganar privilegios a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg21957776 •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2015-1909
https://notcve.org/view.php?id=CVE-2015-1909
25 May 2015 — The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. El analizador sintáctico de XML en el componente Reference Data Management en el servidor en IBM InfoSphere Master... • http://www-01.ibm.com/support/docview.wss?uid=swg21700754 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2015-1910
https://notcve.org/view.php?id=CVE-2015-1910
25 May 2015 — Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en el componente Reference Data Management en el servidor en IBM InfoSphere Master Data Management (MDM) 10.1 anterior a IF1, 11.0 anterior a FP3, y 11.3 permite a usuarios remotos autenticados inyectar secuenc... • http://www-01.ibm.com/support/docview.wss?uid=swg21700741 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 20EXPL: 0CVE-2014-8896
https://notcve.org/view.php?id=CVE-2014-8896
22 Dec 2014 — The Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to modify the administrator's credentials and consequently gain privileges via unspecified vectors. El servidor Collaboration Server en IBM InfoSphere Master Data Management Server for Product Information Management 9.x ha... • http://www-01.ibm.com/support/docview.wss?uid=swg21692176 • CWE-287: Improper Authentication •
CVSS: 5.4EPSS: 0%CPEs: 20EXPL: 0CVE-2014-8897
https://notcve.org/view.php?id=CVE-2014-8897
22 Dec 2014 — Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8898 and CVE-2014-8899. Vulnerabilidad de XSS en el Collaboration Server en IBM ... • http://www-01.ibm.com/support/docview.wss?uid=swg21692176 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 20EXPL: 0CVE-2014-8898
https://notcve.org/view.php?id=CVE-2014-8898
22 Dec 2014 — Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8897 and CVE-2014-8899. Vulnerabilidad de XSS en el Collaboration Server en IBM ... • http://www-01.ibm.com/support/docview.wss?uid=swg21692176 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 20EXPL: 0CVE-2014-8899
https://notcve.org/view.php?id=CVE-2014-8899
22 Dec 2014 — Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8897 and CVE-2014-8898. Vulnerabilidad de XSS en el Collaboration Server en IBM ... • http://www-01.ibm.com/support/docview.wss?uid=swg21692176 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2014-4775
https://notcve.org/view.php?id=CVE-2014-4775
17 Aug 2014 — IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 do not properly protect credentials, which allows remote attackers to obtain sensitive information via unspecified vectors. IBM InfoSphere Master Data Management - Collaborative Edition 10.x anterior a 10.1-FP11 y 11.x anterior a 11.0-FP5 y InfoSphere Master Data Manag... • http://www-01.ibm.com/support/docview.wss?uid=swg21681640 • CWE-255: Credentials Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 14EXPL: 0CVE-2014-3063
https://notcve.org/view.php?id=CVE-2014-3063
17 Aug 2014 — IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges via unspecified vectors. IBM InfoSphere Master Data Management - Collaborative Edition 10.x anterior a 10.1-FP11 y 11.x anterior a 11.0-FP5 y InfoSphere Master Data Management Server for Product Information Managemen... • http://secunia.com/advisories/60680 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.8EPSS: 0%CPEs: 14EXPL: 0CVE-2014-0966
https://notcve.org/view.php?id=CVE-2014-0966
17 Aug 2014 — SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en el componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0-FP5 y InfoSphere... • http://secunia.com/advisories/60679 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •