Lucene search
HistoryMay 28, 2013 - 4:55 p.m.
CVE-2013-0499
cve-2013-0499
cross-site scripting
xss
ibm
websphere
datapower
nvd
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.6%
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services.
Affected configurations
Node
ibmwebsphere_datapower_xc10_appliance_firmwareMatch3.8.2
ORibmwebsphere_datapower_xc10_appliance_firmwareMatch4.0
ORibmwebsphere_datapower_xc10_appliance_firmwareMatch4.0.1
ORibmwebsphere_datapower_xc10_appliance_firmwareMatch4.0.2
ORibmwebsphere_datapower_xc10_appliance_firmwareMatch5.0.0
ibmwebsphere_datapower_xc10_applianceMatch-
Node
ibmwebsphere_datapower_service_gateway_xg45_virtual_edition_firmwareMatch3.8.2
ORibmwebsphere_datapower_service_gateway_xg45_virtual_edition_firmwareMatch4.0
ORibmwebsphere_datapower_service_gateway_xg45_virtual_edition_firmwareMatch4.0.1
ORibmwebsphere_datapower_service_gateway_xg45_virtual_edition_firmwareMatch4.0.2
ORibmwebsphere_datapower_service_gateway_xg45_virtual_edition_firmwareMatch5.0.0
ibmwebsphere_datapower_service_gateway_xg45_virtual_editionMatch-
Node
ibmwebsphere_datapower_service_gateway_xg45_firmwareMatch3.8.2
ORibmwebsphere_datapower_service_gateway_xg45_firmwareMatch4.0
ORibmwebsphere_datapower_service_gateway_xg45_firmwareMatch4.0.1
ORibmwebsphere_datapower_service_gateway_xg45_firmwareMatch4.0.2
ORibmwebsphere_datapower_service_gateway_xg45_firmwareMatch5.0.0
ibmwebsphere_datapower_service_gateway_xg45Match-
Node
ibmwebsphere_datapower_integration_appliance_xi52_virtual_edition_firmwareMatch3.8.2
ORibmwebsphere_datapower_integration_appliance_xi52_virtual_edition_firmwareMatch4.0
ORibmwebsphere_datapower_integration_appliance_xi52_virtual_edition_firmwareMatch4.0.1
ORibmwebsphere_datapower_integration_appliance_xi52_virtual_edition_firmwareMatch4.0.2
ORibmwebsphere_datapower_integration_appliance_xi52_virtual_edition_firmwareMatch5.0.0
ibmwebsphere_datapower_integration_appliance_xi52_virtual_editionMatch-
Node
ibmwebsphere_datapower_integration_appliance_xi52_firmwareMatch3.8.2
ORibmwebsphere_datapower_integration_appliance_xi52_firmwareMatch4.0
ORibmwebsphere_datapower_integration_appliance_xi52_firmwareMatch4.0.1
ORibmwebsphere_datapower_integration_appliance_xi52_firmwareMatch4.0.2
ORibmwebsphere_datapower_integration_appliance_xi52_firmwareMatch5.0.0
ibmwebsphere_datapower_integration_appliance_xi52Match-
Node
ibmwebsphere_datapower_integration_appliance_xi50_firmwareMatch3.8.2
ORibmwebsphere_datapower_integration_appliance_xi50_firmwareMatch4.0
ORibmwebsphere_datapower_integration_appliance_xi50_firmwareMatch4.0.1
ORibmwebsphere_datapower_integration_appliance_xi50_firmwareMatch4.0.2
ORibmwebsphere_datapower_integration_appliance_xi50_firmwareMatch5.0.0
ibmwebsphere_datapower_integration_appliance_xi50Match-
Node
ibmwebsphere_datapower_b2b_appliance_xb62_firmwareMatch3.8.2
ORibmwebsphere_datapower_b2b_appliance_xb62_firmwareMatch4.0
ORibmwebsphere_datapower_b2b_appliance_xb62_firmwareMatch4.0.1
ORibmwebsphere_datapower_b2b_appliance_xb62_firmwareMatch4.0.2
ORibmwebsphere_datapower_b2b_appliance_xb62_firmwareMatch5.0.0
ibmwebsphere_datapower_b2b_appliance_xb62Match-
Related
cvelist
cvelist
CVE-2013-0499
2013-05-28 16:00:00
ibm
ibm
zdt
zdt
IBM WebSphere DataPower 3.8.2 / 4.0.x / 5.0 Cross Site Scripting
2013-05-24 00:00:00
prion
prion
Cross site scripting
2013-05-28 16:55:00
nvd
nvd
CVE-2013-0499
2013-05-28 16:55:01
5.8 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.6%
Related for CVE-2013-0499