CVE:CVE-2013-0478
CNNVD:CNNVD-201302-313
IBM InfoSphereTM Master Data Management Server是IBM提供的一种操作MDM解决方案，提供了企业解决关键企业MDM问题所需的战略性架构。
IBM InfoSphere Master Data Management - Collaborative Edition 10.0和FP1之前的10.1版本和InfoSphere Master Data Management Server for Product Information Management 6.0版本，9.0版本，9.1版本中存在跨站脚本漏洞。通过未明向量，远程攻击者利用该漏洞注入任意web脚本或HTML。
solution:Upgrade ibm infosphere_master_data_management_collaboration_server to a higher version than 10.0.0,10.0.1,and avoid the version 10.0.0,10.0.1; Upgrade ibm infosphere_master_data_management_server_for_product_information_management to a higher version than 6.0.0,9.0.0,9.1.0,and avoid the version 6.0.0,9.0.0,9.1.0