IBM InfoSphere Master Data Management Server vulnerabilities

13 CVEs affecting IBM InfoSphere Master Data Management Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4675, published 2021-07-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-1909, published 2015-05-25. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, 11.3, and 11.4 before FP2 allows remote…
CVE-2016-9719, published 2017-07-31. Medium severity, CVSS 5.7. EPSS: 1.2% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
CVE-2016-9717, published 2017-07-31. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated…
CVE-2015-1945, published 2015-06-02. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users to gain…
CVE-2015-1910, published 2015-05-25. Low severity, CVSS 3.5. EPSS: 0.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows…
CVE-2016-9718, published 2017-07-31. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2016-9715, published 2017-07-31. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2017-1199, published 2017-08-03. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2016-9716, published 2017-07-31. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
CVE-2014-0873, published 2014-03-16. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before…

Latest

CVE-2020-4675, published 2021-07-16. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that…
CVE-2016-9714, published 2017-07-31. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
CVE-2017-1309, published 2017-07-19. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.