Improper input validation in Ibm Infosphere Master Data Management
CVE-2016-9717
HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Ibm Infosphere Master Data Management — versions 11.3, 11.0, 10.1
- Ibm Infosphere_master_data_management_server — versions 10.1, 11.0, 11.3
Weakness classification (CWE)
References
- psirt@us.ibm.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (VDB Entry, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-9717?
- CVE-2016-9717 is a medium-severity vulnerability in Ibm Infosphere Master Data Management, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2017-07-31.
- How severe is CVE-2016-9717?
- Medium severity. CVSS v3 base score is 6.5 out of 10.