VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 3, 2017· Updated Jun 17, 2026

CVE-2017-1199

CVE-2017-1199

Description

IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123674.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • IBM/Infosphere Master Data Management Server7 versions
    cpe:2.3:a:ibm:infosphere_master_data_management_server:10.1:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ibm:infosphere_master_data_management_server:10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_master_data_management_server:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_master_data_management_server:11.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_master_data_management_server:11.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_master_data_management_server:11.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:infosphere_master_data_management_server:11.6:*:*:*:*:*:*:*
    • (no CPE)range: 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6
  • IBM/Infosphere Master Data Managementcpe-rescue
    Range: 10.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.