CVE-2013-4036: XSS
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4036?
CVE-2013-4036 is classified as a medium severity Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2013-4036?
To fix CVE-2013-4036, upgrade to IBM InfoSphere Master Data Management Server for Product Information Management version 9.1 FP13 or higher, or Collaborative Edition version 10.1 FP7 or higher.
Who is affected by CVE-2013-4036?
CVE-2013-4036 affects authenticated remote users on IBM InfoSphere Master Data Management Server for Product Information Management and Collaborative Edition prior to the specified updates.
What products are impacted by CVE-2013-4036?
The impacted products include IBM InfoSphere Master Data Management Server for Product Information Management v9.0, v9.1, and IBM InfoSphere Master Data Management Collaborative Edition v10.0, v10.1, v11.0.
Is CVE-2013-4036 exploitable?
Yes, CVE-2013-4036 is exploitable by remote authenticated users, allowing them to inject arbitrary web script or HTML.