CVE-2015-7492

Cross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
VendorProductVersion
ibminfosphere_master_data_management_reference_data_management
10.1
ibminfosphere_master_data_management_reference_data_management
11.0
ibminfosphere_master_data_management_reference_data_management
11.3
ibminfosphere_master_data_management_reference_data_management
11.4
ibminfosphere_master_data_management_reference_data_management
11.5
𝑥
= Vulnerable software versions