cbcvebase.
CVE-2013-4036
published 2013-11-27

CVE-2013-4036: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM…

low3.5CVSS 3.1
AVNACMAuSCNIPAN
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected

5 ranges
VendorProductVersion rangeFixed in
ibminfosphere_master_data_management_collaboration_server
ibminfosphere_master_data_management_collaboration_server
ibminfosphere_master_data_management_collaboration_server
ibminfosphere_master_data_management_server_for_product_information_management
ibminfosphere_master_data_management_server_for_product_information_management