Login Request a demo
Unscored severity · published Mar 16, 2014
CVE-2014-0873
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Data Stewardship, (2) Business Admin, and (3) Product interfaces in IBM InfoSphere Master Data Management (MDM) Server 8.5 before 8.5.0.82, 9.0.1 before 9.0.1.38, 9.0.2 before 9.0.2.35, 10.0 before 10.0.0.0.26, and 10.1 before 10.1.0.0.15 allow remote attackers to hijack the authentication of arbitrary users.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Infosphere Master Data Management Server · Ibm
8.5; 9.0.1; 9.0.2; 10.0; 10.1 · source: NVD
Affected product
IM
Infosphere Master Data Management Server
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0873
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0873
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21666462
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/90994
More from Infosphere Master Data Management Server
8.8
CVE-2016-9716
IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
8.8
CVE-2016-9714
IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious…
7.8
CVE-2017-1309
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user
6.5
CVE-2020-4675
IBM InfoSphere Master Data Management Server 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
6.5
CVE-2016-9717
HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1