CVE-2015-4960

Опубликовано: 17 янв. 2016

Источник: nvd

CVSS3: 4.1

CVSS2: 3.5

EPSS Низкий

Описание

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21971545
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21971545
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_master_data_management:9.1:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:10.1:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:11.0:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:11.3:*:*:*:collaborative:*:*:*

cpe:2.3:a:ibm:infosphere_master_data_management:11.4:*:*:*:collaborative:*:*:*

EPSS

Процентиль: 34%

0.00139

Низкий

4.1 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-254

Связанные уязвимости

GHSA-9rhv-mv57-5cpv