CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0CVE-2015-1945
https://notcve.org/view.php?id=CVE-2015-1945
Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain privileges via unknown vectors. Vulnerabilidad no especificada en el componente Reference Data Management en IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 anterior a FP3, y 11.4 permite a usuarios remotos autenticados ganar privilegios a través de vectores desconocidos. • http://www-01.ibm.com/support/docview.wss?uid=swg21957776 http://www.securityfocus.com/bid/74929 •
CVSS: 5.0EPSS: 0%CPEs: 4EXPL: 0CVE-2015-1909
https://notcve.org/view.php?id=CVE-2015-1909
The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote attackers to read arbitrary files, and consequently obtain administrative access, via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. El analizador sintáctico de XML en el componente Reference Data Management en el servidor en IBM InfoSphere Master Data Management (MDM) 10.1 anterior a IF1, 11.0 anterior a FP3, 11.3, y 11.4 anterior a FP2 permite a atacantes remotos leer ficheros arbitrarios, y como consecuencia obtener el acceso administrativo, a través de una declaración de entidad externa en conjunto con una referencia de entidad, relacionado con un problema de entidad externa XML (XXE). • http://www-01.ibm.com/support/docview.wss?uid=swg21700754 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 3.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-1910
https://notcve.org/view.php?id=CVE-2015-1910
Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. Vulnerabilidad de XSS en el componente Reference Data Management en el servidor en IBM InfoSphere Master Data Management (MDM) 10.1 anterior a IF1, 11.0 anterior a FP3, y 11.3 permite a usuarios remotos autenticados inyectar secuencias de comandos web arbitrarios o HTML a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg21700741 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 14EXPL: 0CVE-2014-3063
https://notcve.org/view.php?id=CVE-2014-3063
IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1-FP15 and 10.x and 11.x before 11.3-IF2 allow local users to obtain administrator privileges via unspecified vectors. IBM InfoSphere Master Data Management - Collaborative Edition 10.x anterior a 10.1-FP11 y 11.x anterior a 11.0-FP5 y InfoSphere Master Data Management Server for Product Information Management 9.x anterior a 9.1-FP15 y 10.x y 11.x anterior a 11.3-IF2 permiten a usuarios locales obtener los privilegios de administrador a través de vectores no especificados. • http://secunia.com/advisories/60680 http://secunia.com/advisories/60694 http://secunia.com/advisories/60695 http://www-01.ibm.com/support/docview.wss?uid=swg21680403 https://exchange.xforce.ibmcloud.com/vulnerabilities/93599 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.8EPSS: 0%CPEs: 14EXPL: 0CVE-2014-0969
https://notcve.org/view.php?id=CVE-2014-0969
Cross-site request forgery (CSRF) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to hijack the authentication of arbitrary users. Vulnerabilidad de CSRF en el componente GDS en IBM InfoSphere Master Data Management - Collaborative Edition 10.x y 11.x anterior a 11.0-FP5 y InfoSphere Master Data Management Server for Product Information Management 9.x hasta 11.x anterior a 11.3-IF2 permite a usuarios remotos autenticados secuestrar la autenticación de usuarios arbitrarios. • http://secunia.com/advisories/60679 http://secunia.com/advisories/60693 http://secunia.com/advisories/60695 http://www-01.ibm.com/support/docview.wss?uid=swg21681649 http://www.securityfocus.com/bid/69262 https://exchange.xforce.ibmcloud.com/vulnerabilities/92885 • CWE-352: Cross-Site Request Forgery (CSRF) •