CVE-2013-0477

IBM InfoSphere - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.

References (2)

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21624952

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/81481

Scores

EPSS 0.0041

EPSS Percentile 60.7%

Details

CWE

CWE-79

Status published

Products (6)

ibm/infosphere_master_data_management_collaboration_server

ibm/infosphere_master_data_management_server_for_product_information_management

n/a/n/a

Published Feb 21, 2013

Tracked Since Feb 18, 2026