PT-2016-3797 · Ibm · Ibm Infosphere Master Data Management
Published
2016-02-15
·
Updated
2016-03-10
·
CVE-2015-7492
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM InfoSphere Master Data Management versions 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1
Description
A cross-site scripting (XSS) issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This affects the Reference Data Management (RDM) component.
Recommendations
For version 10.1, update to a version that includes the fix for this issue.
For version 11.0, apply FP5 or later to resolve the issue.
For version 11.3, consider upgrading to a later version that includes the necessary security patches.
For version 11.4, apply the relevant security fix or upgrade to a later version.
For version 11.5, apply FP1 or later to address the vulnerability.
As a temporary workaround, consider restricting access to crafted URLs to minimize the risk of exploitation.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Infosphere Master Data Management