CVE-2014-0970: Input Validation
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0970?
The severity of CVE-2014-0970 is classified as moderate due to the potential for remote authenticated users to inject malicious links.
How do I fix CVE-2014-0970?
To fix CVE-2014-0970, upgrade to IBM InfoSphere Master Data Management Collaborative Edition 11.0 FP4 or higher, or to a patched version of Master Data Management Server for Product Information Management.
Who is affected by CVE-2014-0970?
CVE-2014-0970 affects users of IBM InfoSphere Master Data Management - Collaborative Edition versions 10.x and 11.x prior to FP4, and versions 9.0 and 9.1 of the InfoSphere Master Data Management Server for Product Information Management.
Can CVE-2014-0970 be exploited remotely?
Yes, CVE-2014-0970 can be exploited remotely by authenticated users to inject links through unspecified vectors.
What components are involved in CVE-2014-0970?
CVE-2014-0970 involves the GDS component of IBM InfoSphere Master Data Management.