CVE-2015-7423: XSS

Published Mar 26, 2018

Updated

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 107771.

Affected Software

5 affected components

IBM InfoSphere Master Data Management=9.1

IBM InfoSphere Master Data Management=10.1

IBM InfoSphere Master Data Management=11.0

IBM InfoSphere Master Data Management=11.3

IBM InfoSphere Master Data Management=11.4

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21971543

Event History

Mar 26, 2018

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2015-7423.

What is the severity of CVE-2015-7423?

CVE-2015-7423 has a severity score of 5.4, which is classified as medium.

What is the affected software for CVE-2015-7423?

The affected software for CVE-2015-7423 is IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4.

How can remote authenticated users exploit CVE-2015-7423?

Remote authenticated users can exploit CVE-2015-7423 by injecting arbitrary web script or HTML via unspecified vectors.

Where can I find more information about CVE-2015-7423?

You can find more information about CVE-2015-7423 on the IBM website, SecurityFocus, and IBM X-Force Exchange.