NVD

Id
29790  
Name
CVE-2014-0966  
Description
SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-08-17  
Modified Date
2017-01-06  
Seq
2014-0966  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157340 29790 CVE-2014-0966 60679  View
157341 29790 CVE-2014-0966 60693  View
157342 29790 CVE-2014-0966 60695  View
157343 29790 CVE-2014-0966 http://www-01.ibm.com/support/docview.wss?uid=swg21681651  View
157344 29790 CVE-2014-0966 ibm-infospheremdm-cve20140966-sql-injection(92880)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14952 JVNDB-2014-003827 IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management における SQL インジェクションの脆弱性 IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management の GDS コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2014-0966 68367 CVE-2014-0966 29790 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003827.html 2014-08-14 2014-08-19 View