exploitDog

CVE-2015-1910

Опубликовано: 25 мая 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21700741
Patch
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21700741
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_master_data_management_server:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management_server:11.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management_server:11.3:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-m7w7-wqfv-qrp6

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3, and 11.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

EPSS

Процентиль: 38%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79