CVE-2013-4036: IBM InfoSphere Master Data Management Collaboration Server

Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• IBM InfoSphere Master Data Management Collaboration Server: version 10.0 only; version 10.1 only; version 11.0 only
• IBM InfoSphere Master Data Management Server For Product Information Management: version 9.0 only; version 9.1 only

Published 2013-11-27. Last modified 2026-06-16.