Lucene search

[email protected]CVE-2013-0542

HistoryApr 24, 2013 - 10:28 a.m.

CVE-2013-0542

2013-04-2410:28:00

CWE-79

[email protected]

web.nvd.nist.gov

ibm

websphere

app server

xss

vulnerability

nvd

cve-2013-0542

7.6 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.5%

JSON

Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via crafted field values.

CPENameOperatorVersion
ibm:websphere_application_serveribm websphere application servereq6.1.0.21
ibm:websphere_application_serveribm websphere application servereq6.1.0.31
ibm:websphere_application_serveribm websphere application servereq6.1.0.19
ibm:websphere_application_serveribm websphere application servereq6.1.0.2
ibm:websphere_application_serveribm websphere application servereq6.1.0.33
ibm:websphere_application_serveribm websphere application servereq6.1.0.25
ibm:websphere_application_serveribm websphere application servereq6.1.0.11
ibm:websphere_application_serveribm websphere application servereq6.1.0.41
ibm:websphere_application_serveribm websphere application servereq6.1.0.39
ibm:websphere_application_serveribm websphere application servereq6.1.0.14

CPE	Name	Operator	Version
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.21
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.31
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.19
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.2
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.33
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.25
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.11
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.41
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.39
ibm:websphere_application_server	ibm websphere application server	eq	6.1.0.14

Rows per page:

1-10 of 541

References

www-01.ibm.com/support/docview.wss?&uid=swg21632423

www-01.ibm.com/support/docview.wss?uid=swg1PM81846

exchange.xforce.ibmcloud.com/vulnerabilities/82697

7.6 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.5%

JSON

Related for CVE-2013-0542

prion1 openvas1 ibm4 nessus4