CVE-2015-4960

Severity: medium (CVSS 4.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-17 · updated 2026-06-17
Weakness: CWE-254

Description

IBM InfoSphere Master Data Management - Collaborative Edition 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

Affected products

IBM InfoSphere Master Data Management Collaboration Server: 9.1, 10.1, 11.0, 11.3, 11.4

References

http://www-01.ibm.com/support/docview.wss?uid=swg21971545
http://www-01.ibm.com/support/docview.wss?uid=swg21971545

Get alerted when CVE-2015-4960 or the next vulnerability affects your stack