CVE-2014-0968: XSS
First published: Sat Jul 19 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL for an MHTML document.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM InfoSphere Master Data Management Collaboration Server | =10.0 | |
| IBM InfoSphere Master Data Management Collaboration Server | =10.1 | |
| IBM InfoSphere Master Data Management Collaboration Server | =11.0 | |
| IBM InfoSphere Master Data Management Server for Product Information Management | =9.0 | |
| IBM InfoSphere Master Data Management Server for Product Information Management | =9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-0968?
CVE-2014-0968 is classified as a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2014-0968?
To fix CVE-2014-0968, upgrade to IBM InfoSphere Master Data Management Collaborative Edition 10.x and 11.x to version 11.0 FP4 or later.
What platforms are affected by CVE-2014-0968?
CVE-2014-0968 affects IBM InfoSphere Master Data Management Collaborative Edition versions 10.0, 10.1, 11.0, and the Master Data Management Server for Product Information Management versions 9.0 and 9.1.
Who is impacted by CVE-2014-0968?
CVE-2014-0968 can impact remote authenticated users who can inject arbitrary JavaScript into the application.
What type of vulnerability is CVE-2014-0968?
CVE-2014-0968 is a cross-site scripting (XSS) vulnerability that allows for the injection of malicious scripts.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/softwarecombine
- vendor/ibm
- canonical/ibm infosphere master data management collaboration server
- version/ibm infosphere master data management collaboration server/10.0
- version/ibm infosphere master data management collaboration server/10.1
- version/ibm infosphere master data management collaboration server/11.0
- canonical/ibm infosphere master data management server for product information management
- version/ibm infosphere master data management server for product information management/9.0
- version/ibm infosphere master data management server for product information management/9.1