Lucene search

K
nvd[email protected]NVD:CVE-2014-0970
HistoryJul 19, 2014 - 5:09 a.m.

CVE-2014-0970

2014-07-1905:09:27
CWE-20
web.nvd.nist.gov
4

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

34.2%

The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote authenticated users to inject links via unspecified vectors.

Affected configurations

Nvd
Node
ibminfosphere_master_data_management_collaboration_serverMatch10.0
OR
ibminfosphere_master_data_management_collaboration_serverMatch10.1
OR
ibminfosphere_master_data_management_collaboration_serverMatch11.0
OR
ibminfosphere_master_data_management_server_for_product_information_managementMatch9.0
OR
ibminfosphere_master_data_management_server_for_product_information_managementMatch9.1
VendorProductVersionCPE
ibminfosphere_master_data_management_collaboration_server10.0cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.0:*:*:*:*:*:*:*
ibminfosphere_master_data_management_collaboration_server10.1cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:10.1:*:*:*:*:*:*:*
ibminfosphere_master_data_management_collaboration_server11.0cpe:2.3:a:ibm:infosphere_master_data_management_collaboration_server:11.0:*:*:*:*:*:*:*
ibminfosphere_master_data_management_server_for_product_information_management9.0cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.0:*:*:*:*:*:*:*
ibminfosphere_master_data_management_server_for_product_information_management9.1cpe:2.3:a:ibm:infosphere_master_data_management_server_for_product_information_management:9.1:*:*:*:*:*:*:*

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

6

Confidence

Low

EPSS

0.001

Percentile

34.2%

Related for NVD:CVE-2014-0970