CVE-2017-1199

Published: Aug 3, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674.

Affected (6)

Products: Ibm: Infosphere Master Data Management Server

Ibm

1 product

Infosphere Master Data Management Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Master Data Management Server	Version 10.1
Ibm Infosphere Master Data Management Server	Version 11.0
Ibm Infosphere Master Data Management Server	Version 11.3
Ibm Infosphere Master Data Management Server	Version 11.4
Ibm Infosphere Master Data Management Server	Version 11.5
Ibm Infosphere Master Data Management Server	Version 11.6