Unscored severity · published Feb 21, 2013
CVE-2013-0478
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Infosphere Master Data Management Collaboration Server · Ibm
10.0.0; 10.0.1 · source: NVD
IM
Infosphere Master Data Management Server For Product Information Management · Ibm
6.0.0; 9.0.0; 9.1.0 · source: NVD
Affected product
IM
Infosphere Master Data Management Collaboration Server
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0478
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0478
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21624952
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/81482
More from Infosphere Master Data Management Collaboration Server
–
CVE-2014-3064
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product…
–
CVE-2014-0970
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master Data Management Server for Product…
–
CVE-2014-0968
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master…
–
CVE-2014-0967
Cross-site scripting (XSS) vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0 FP4 and InfoSphere Master…
–
CVE-2013-5427
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data…