medium6.5
CVE-2014-0966
SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere …
Impact
SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Infosphere Master Data Management | Versions 10.0, 10.1, 11.0, 11.3 |
| Ibm | Infosphere Master Data Management Server For Product Information Management | Versions 9.0, 9.1, 10.0, 10.0.0.1, 10.0.1, 10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60679
- http://secunia.com/advisories/60693
- http://secunia.com/advisories/60695
- http://www-01.ibm.com/support/docview.wss?uid=swg21681651
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92880
- http://secunia.com/advisories/60679
- http://secunia.com/advisories/60693
- http://secunia.com/advisories/60695
- http://www-01.ibm.com/support/docview.wss?uid=swg21681651
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92880