CVE-2015-1968

IBM InfoSphere MDM Collaborative Edition 9.1-11.4 Authenticated XSS via Crafted URL

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21960244
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/75476

Scores

EPSS 0.0077
EPSS Percentile 52.0%

Details

CWE
CWE-79
Status published
Products (5)
ibm/infosphere_master_data_management 9.1
ibm/infosphere_master_data_management 10.1
ibm/infosphere_master_data_management 11.0
ibm/infosphere_master_data_management 11.3
ibm/infosphere_master_data_management 11.4
Published Jul 20, 2015
Tracked Since Feb 18, 2026