CVE-2015-7414: IBM InfoSphere Master Data Management

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected products

• IBM InfoSphere Master Data Management: version 9.1 only; version 10.1 only; version 11.0 only; version 11.3 only; version 11.4 only

Published 2016-01-17. Last modified 2026-06-17.