XSS in Ibm Infosphere_master_data_management_server

CVE-2015-1910

Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitra…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (52.0th percentile) — read the EPSS interpretation.

Affected products

Ibm Infosphere_master_data_management_server — versions 10.1, 11.0, 11.3
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)