CVE-2014-4785

Cross-site request forgery (CSRF) vulnerability in IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

• CWE-352

• http://secunia.com/advisories/60996
• http://www-01.ibm.com/support/docview.wss?uid=swg21682450Patch, Vendor Advisory
• http://www.securityfocus.com/bid/69694Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95032
• http://secunia.com/advisories/60996
• http://www-01.ibm.com/support/docview.wss?uid=swg21682450Patch, Vendor Advisory
• http://www.securityfocus.com/bid/69694Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95032

Published

Sep 10, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4776IBM License Metric Tool 9 before 9.1.0.2 does not have an of…
• CVE-2014-4778IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manage…
• CVE-2014-4781The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x…
• CVE-2014-4782IBM InfoSphere BigInsights 2.1.2 allows remote authenticated…
• CVE-2014-4783Cross-site request forgery (CSRF) vulnerability in IBM Initi…
• CVE-2014-4784IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 …
• CVE-2014-4786IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 …
• CVE-2014-4787Cross-site scripting (XSS) vulnerability in IBM Initiate Mas…
• CVE-2014-4788IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 …
• CVE-2014-4789Session fixation vulnerability in IBM Initiate Master Data S…
• CVE-2014-4790IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0…
• CVE-2014-4792IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 throu…