Christophe Garrigues

Researcher fromNES -Network Engineering & Security
#21515of 60,594
14.5Total CVSS
Vulnerabilities · 4
Low
3
Medium
1
PT-2014-8748
2014-12-22
4.0
CVE-2014-8896
Ibm
Ibm Infosphere Master Data Management Server For Product Information Management
The issue allows remote authenticated users to modify the administrator's credentials, consequently gaining privileges. This is achieved via unspecified vectors in the Collaboration Server component.
PT-2014-8749
2014-12-22
3.5
CVE-2014-8897
Ibm
Infosphere Master Data Management Collaborative Server
Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8898 and CVE-2014-8899.
PT-2014-8750
2014-12-22
3.5
CVE-2014-8898
Ibm
Infosphere Master Data Management Collaborative Server
Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8897 and CVE-2014-8899.
PT-2014-8751
2014-12-22
3.5
CVE-2014-8899
Ibm
Infosphere Master Data Management Collaborative Server
Cross-site scripting (XSS) vulnerability in the Collaboration Server in IBM InfoSphere Master Data Management Server for Product Information Management 9.x through 9.1 and InfoSphere Master Data Management - Collaborative Edition 10.x through 10.1, 11.0 before FP7, and 11.3 and 11.4 before 11.4 FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-8897 and CVE-2014-8898.