Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:infosphere_master_data_management_server:11.5:*:*:*:*:*:*:*

part: a version: 11.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductInfosphere Master Data Management Server (9b475699-c439-5d16-9375-322d731e2ee0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1309 vulnerable 2026-06-08 05:09:21.697036 Details available
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.
Published: 2017-07-19T20:00:00.000Z
Updated: 2024-09-16T20:57:41.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1199 vulnerable 2026-06-08 05:09:21.358781 Details available
IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674.
Published: 2017-08-03T15:00:00.000Z
Updated: 2024-09-16T17:43:09.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9719 vulnerable 2026-06-08 05:08:24.355384 Details available
IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 119733.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-16T18:39:38.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9718 vulnerable 2026-06-08 05:08:24.354928 Details available
IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119732.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-16T18:38:33.858Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9717 vulnerable 2026-06-08 05:08:24.354483 Details available
HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited.
Published: 2017-07-31T21:00:00.000Z
Updated: 2024-09-16T23:56:16.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9716 vulnerable 2026-06-08 05:08:24.353737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9715 vulnerable 2026-06-08 05:08:24.353292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9714 vulnerable 2026-06-08 05:08:24.352259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.