CVE-2014-0970: The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11....

Security readout for executives and security teams

This IBM MDM issue lets a logged-in remote user inject links into the GDS component. The public record does not describe the vectors, impact details, or CVSS score. Treat it as a trust and phishing risk inside affected MDM workflows, especially where external partners or many internal users have access. Exposure is limited to organizations running the named IBM InfoSphere MDM products with the GDS component accessible to authenticated users. Risk rises where accounts are broadly issued to partners, suppliers, contractors, or low-trust internal users. Prioritize confirmation during IBM MDM patch review. This is not supported as an emergency from the provided evidence, but affected systems handling supplier or product data should be remediated because trusted business workflows can amplify deceptive links. Mitigation focus: Identify whether affected IBM InfoSphere MDM versions are deployed.; Review IBM advisory swg21677304 for product-specific remediation.; Upgrade Collaborative Edition deployments to 11.0 FP4 or later where applicable..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.