CVE-2014-4786

IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before 10.0.093013, and 10.1 before 10.1.093013 does not properly restrict use of FRAME elements, which allows remote authenticated users to conduct phishing attacks, and bypass intended access restrictions or obtain sensitive information, via a crafted web site, related to a "frame injection" issue.

• CWE-264

• http://secunia.com/advisories/60996
• http://www-01.ibm.com/support/docview.wss?uid=swg21682450Patch, Vendor Advisory
• http://www.securityfocus.com/bid/69720Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95033
• http://secunia.com/advisories/60996
• http://www-01.ibm.com/support/docview.wss?uid=swg21682450Patch, Vendor Advisory
• http://www.securityfocus.com/bid/69720Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95033

Published

Sep 10, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4778IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manage…
• CVE-2014-4781The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x…
• CVE-2014-4782IBM InfoSphere BigInsights 2.1.2 allows remote authenticated…
• CVE-2014-4783Cross-site request forgery (CSRF) vulnerability in IBM Initi…
• CVE-2014-4784IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 …
• CVE-2014-4785Cross-site request forgery (CSRF) vulnerability in IBM Initi…
• CVE-2014-4787Cross-site scripting (XSS) vulnerability in IBM Initiate Mas…
• CVE-2014-4788IBM Initiate Master Data Service 9.5 before 9.5.093013, 9.7 …
• CVE-2014-4789Session fixation vulnerability in IBM Initiate Master Data S…
• CVE-2014-4790IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0…
• CVE-2014-4792IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 throu…
• CVE-2014-4793IBM WebSphere MQ 8.x before 8.0.0.1 does not properly enforc…