IBM Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to cross-site scripting (XSS) Attack (CVE-2017-1199)

IBM InfoSphere Master Data Management is vulnerable to a cross-site scripting (XSS) Attack and could allow users to embed arbitrary JavaScript code in the Web UI and lead to disclosure of credentials.

CVE(s): CVE-2017-1199

Affected product(s) and affected version(s):

This vulnerability is known to affect the following offerings:

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hnzin1
X-Force Database: http://ift.tt/2f8z3vb

The post IBM Security Bulletin: IBM InfoSphere Master Data Management Server is vulnerable to cross-site scripting (XSS) Attack (CVE-2017-1199) appeared first on IBM PSIRT Blog.

Affected IBM InfoSphere Master Data Management Server	Affected Versions
IBM InfoSphere Master Data Management Server	10.1
IBM InfoSphere Master Data Management Server	11.0
IBM InfoSphere Master Data Management Server	11.3
IBM InfoSphere Master Data Management Server	11.4
IBM InfoSphere Master Data Management Server	11.5
IBM InfoSphere Master Data Management Server	11.6

from IBM Product Security Incident Response Team http://ift.tt/2hnT1D9