CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 0CVE-2013-5426
https://notcve.org/view.php?id=CVE-2013-5426
19 Dec 2013 — Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via unspecified vectors. Vulnerabilidad de fijación de sesión en IBM InfoSphere Master Data Management - Collaborative Edition 10.x anteriores a 10.1 IF5 y 11.0 anteriores a IF1 e InfoSphere Master Data Management Serv... • http://www-01.ibm.com/support/docview.wss?uid=swg21660082 • CWE-287: Improper Authentication •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2013-4036
https://notcve.org/view.php?id=CVE-2013-4036
27 Nov 2013 — Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en IBM InfoSphere Master Data Management Server para Product Information Management 9.x anterior a la versión 9.1 FP13, e IBM InfoSphere Ma... • http://www-01.ibm.com/support/docview.wss?uid=swg21656857 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •