CVE-2014-0966

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-17 · updated 2026-06-17
Weakness: CWE-89

Description

SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x through 11.x before 11.3-IF2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected products

IBM InfoSphere Master Data Management Collaboration Server: 10.0, 10.1, 11.0, 11.3
IBM Infosphere Master Data Management Server For Product Information Management: 9.0, 9.1, 10.0, 10.0.0.1, 10.0.1, 10.1 (+4)

References

http://secunia.com/advisories/60679
http://secunia.com/advisories/60693
http://secunia.com/advisories/60695
http://www-01.ibm.com/support/docview.wss?uid=swg21681651
https://exchange.xforce.ibmcloud.com/vulnerabilities/92880
http://secunia.com/advisories/60679
http://secunia.com/advisories/60693
http://secunia.com/advisories/60695
http://www-01.ibm.com/support/docview.wss?uid=swg21681651
https://exchange.xforce.ibmcloud.com/vulnerabilities/92880

Get alerted when CVE-2014-0966 or the next vulnerability affects your stack