Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_master_data_management_server:11.0:*:*:*:*:*:*:*

part: a version: 11.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Master Data Management Server (9b475699-c439-5d16-9375-322d731e2ee0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1309 vulnerable 2026-06-08 05:09:21.696972 Details available
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.
Published: 2017-07-19T20:00:00.000Z
Updated: 2024-09-16T20:57:41.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1199 vulnerable 2026-06-08 05:09:21.356500 Details available
IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674.
Published: 2017-08-03T15:00:00.000Z
Updated: 2024-09-16T17:43:09.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9719 vulnerable 2026-06-08 05:08:24.355332 Details available
IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 119733.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-16T18:39:38.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9718 vulnerable 2026-06-08 05:08:24.354876 Details available
IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119732.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-16T18:38:33.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9717 vulnerable 2026-06-08 05:08:24.354431 Details available
HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-16T23:56:16.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9716 vulnerable 2026-06-08 05:08:24.353677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9715 vulnerable 2026-06-08 05:08:24.353231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9714 vulnerable 2026-06-08 05:08:24.350320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1945 vulnerable 2026-06-08 05:06:26.944595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1910 vulnerable 2026-06-08 05:06:26.680513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1909 vulnerable 2026-06-08 05:06:26.678891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.