Show filters
432 Total Results
Displaying 231-240 of 432
Sort by:
Attacker Value
Unknown
CVE-2014-3071
Disclosure Date: July 26, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Data Quality Console in IBM InfoSphere Information Server 11.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL for adding a project connection.
0
Attacker Value
Unknown
CVE-2014-0968
Disclosure Date: July 19, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL for an MHTML document.
0
Attacker Value
Unknown
CVE-2014-0967
Disclosure Date: July 19, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2014-3064
Disclosure Date: July 19, 2014 (last updated October 05, 2023)
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to read arbitrary files via a crafted UNIX file parameter.
0
Attacker Value
Unknown
CVE-2014-0970
Disclosure Date: July 19, 2014 (last updated October 05, 2023)
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-0933
Disclosure Date: May 16, 2014 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Information Server Metadata Workbench 8.1 through 9.1 allows remote attackers to hijack the authentication of arbitrary users.
0
Attacker Value
Unknown
CVE-2014-3006
Disclosure Date: May 02, 2014 (last updated October 05, 2023)
Sitepark Information Enterprise Server (IES) 2.9 before 2.9.6, when upgraded from an earlier version, does not properly restrict access, which allows remote attackers to change the manager account password and obtain sensitive information via a request to install/.
0
Attacker Value
Unknown
CVE-2013-4059
Disclosure Date: March 16, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.
0
Attacker Value
Unknown
CVE-2014-0873
Disclosure Date: March 16, 2014 (last updated October 05, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users.
0
Attacker Value
Unknown
CVE-2013-4057
Disclosure Date: March 16, 2014 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.
0
