CVSS: 8.0EPSS: 0%CPEs: 14EXPL: 0CVE-2014-0969
https://notcve.org/view.php?id=CVE-2014-0969
17 Aug 2014 — Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users. Vulnerabilidad de CSRF en el componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0-FP5 y InfoSpher... • http://secunia.com/advisories/60679 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.8EPSS: 0%CPEs: 5EXPL: 0CVE-2014-3009
https://notcve.org/view.php?id=CVE-2014-3009
01 Aug 2014 — The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site. El componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.0 hasta 11.0 y InfoSphere Master Data Management Server for Product Information Managem... • http://www-01.ibm.com/support/docview.wss?uid=swg21677306 • CWE-20: Improper Input Validation •
CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0CVE-2014-3064
https://notcve.org/view.php?id=CVE-2014-3064
19 Jul 2014 — The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter. El componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0 FP4 y InfoSphere Master Data Management Server para Product Information Management 9.0 y 9.1 permite a ... • http://www-01.ibm.com/support/docview.wss?uid=swg21677299 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2014-0967
https://notcve.org/view.php?id=CVE-2014-0967
19 Jul 2014 — Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabildad de XSS en el componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0 FP4 y InfoSphere Master Data Managem... • http://www-01.ibm.com/support/docview.wss?uid=swg21677300 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2014-0968
https://notcve.org/view.php?id=CVE-2014-0968
19 Jul 2014 — Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL for an MHTML document. Vulnerabildad de XSS en el componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0 FP4 y InfoSphe... • http://www-01.ibm.com/support/docview.wss?uid=swg21677301 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 0CVE-2014-0970
https://notcve.org/view.php?id=CVE-2014-0970
19 Jul 2014 — The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors. El componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0 FP4 y InfoSphere Master Data Management Server para Product Information Management 9.0 y 9.1 permite a usuarios remotos a... • http://www-01.ibm.com/support/docview.wss?uid=swg21677304 • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2014-0873
https://notcve.org/view.php?id=CVE-2014-0873
16 Mar 2014 — Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users. Múltiples vulnerabilidades de CSRF en las interfaces (1) Data Stewardship, (2) Business Admin y (3) Product en el servidor de IBM I... • http://www-01.ibm.com/support/docview.wss?uid=swg21666462 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2013-5427
https://notcve.org/view.php?id=CVE-2013-5427
04 Feb 2014 — Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of arbitrary users. Vulnerabilidad de CSRF en IBM InfoSphere Master Data Management - Collaborative Edition 10.x anteriores a 10.1 FP8 hasta 11.0 e InfoSphere Master Data Management Server para Product Information Manage... • http://www.ibm.com/support/docview.wss?uid=swg21663181 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 0CVE-2013-5426
https://notcve.org/view.php?id=CVE-2013-5426
19 Dec 2013 — Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via unspecified vectors. Vulnerabilidad de fijación de sesión en IBM InfoSphere Master Data Management - Collaborative Edition 10.x anteriores a 10.1 IF5 y 11.0 anteriores a IF1 e InfoSphere Master Data Management Serv... • http://www-01.ibm.com/support/docview.wss?uid=swg21660082 • CWE-287: Improper Authentication •
CVSS: 5.4EPSS: 0%CPEs: 5EXPL: 0CVE-2013-4036
https://notcve.org/view.php?id=CVE-2013-4036
27 Nov 2013 — Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en IBM InfoSphere Master Data Management Server para Product Information Management 9.x anterior a la versión 9.1 FP13, e IBM InfoSphere Ma... • http://www-01.ibm.com/support/docview.wss?uid=swg21656857 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •