IBM Initiate Master Data Service vulnerabilities

7 CVEs affecting IBM Initiate Master Data Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-4789, published 2014-09-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-4789, published 2014-09-10. Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days. Session fixation vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote attackers to hijack…
CVE-2014-4788, published 2014-09-10. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not have an off autocomplete attribute for authentication…
CVE-2014-4784, published 2014-09-10. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows…
CVE-2014-4787, published 2014-09-10. Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote…
CVE-2014-4786, published 2014-09-10. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows…
CVE-2014-4785, published 2014-09-10. Medium severity, CVSS 6.0. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote…
CVE-2014-4783, published 2014-09-10. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote…