CVE-2015-1980

Опубликовано: 20 июл. 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21960244
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75143
http://www-01.ibm.com/support/docview.wss?uid=swg21960244
Patch
Vendor Advisory
http://www.securityfocus.com/bid/75143

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_master_data_management:9.1:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:10.1:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:11.0:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:11.3:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:11.4:*:*:*:collaborative:*:*:*

EPSS

Процентиль: 36%

0.00154

Низкий

3.5 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-5fpj-jg29-mxc5

github

больше 3 лет назад