IBM InfoSphere Master Data Management vulnerabilities

17 CVEs affecting IBM InfoSphere Master Data Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-46187, published 2025-01-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1523, published 2017-10-24. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized user to download reports without authentication. IBM X-Force ID: 129892.
CVE-2015-7424, published 2018-03-26. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote authenticated users to bypass intended access restrictions and obtain sensitive…
CVE-2014-3063, published 2014-08-17. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before…
CVE-2015-7423, published 2018-03-26. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject…
CVE-2014-4775, published 2014-08-17. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before…
CVE-2018-1380, published 2018-10-29. Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive…
CVE-2014-0966, published 2014-08-17. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for…
CVE-2015-1984, published 2015-07-20. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to bypass intended access restrictions and read arbitrary…
CVE-2015-1982, published 2015-07-20. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to obtain sensitive information via a crafted request, which…
CVE-2015-1980, published 2015-07-20. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.

Latest

CVE-2023-46187, published 2025-01-27. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management 11.6, 12.0, and 14.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering…
CVE-2015-7414, published 2016-01-17. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4…
CVE-2015-4960, published 2016-01-17. Medium severity, CVSS 4.1. EPSS: 0.6% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct…
CVE-2015-4958, published 2016-01-17. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 does not properly restrict browser caching,…