Vulnerability Bulletins |
IBM Security Bulletin: Privilege Escalation and Cross Site Scripting vulnerabilities in IBM® InfoSphere® Master Data Management Collaborative Edition (CVE-2014-8896, CVE-2014-8897, CVE-2014-88 |
|
| Affected software | IBM |
|
Privilege Escalation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition could allow an escalation of privilege attack. Cross Site Scripting vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition are caused by improper validation of user-supplied input. A remote attacker can use a specially crafted URL to run scripts in a victims web browser within the security context of the hosting website after the URL is clicked. An attacker can use this More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_privilege_escalation_and_cross_site_scripting_vulnerabilities_in_ibm_infosphere_master_data_management_collaborative_edition_cve_2014_8896_cve_2014_8897_cve_2014_8898_cve_201 |
|