Multiple Cross-Site Scripting Vulnerabilities in IBM InfoSphere Master Data Management
CVE-2013-0477

Currently unrated

Key Information:

Vendor
IBM
Status
Infosphere Master Data Management Collaboration Server
Vendor
CVE Published:
21 February 2013

Summary

Multiple cross-site scripting vulnerabilities exist within IBM InfoSphere Master Data Management products, allowing remote authenticated users to inject malicious content. This flaw facilitates phishing attacks through unspecified means, potentially compromising users' sensitive information. The affected versions are those prior to Fix Pack 1 for the Collaborative Edition, as well as specific versions of the Master Data Management Server for Product Information Management.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21624952
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/81481
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.