Lucene search

[email protected]CVE-2013-0548

HistoryJun 21, 2013 - 5:55 p.m.

CVE-2013-0548

2013-06-2117:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve

2013

0548

cross-site scripting

xss

ibm

tivoli monitoring

itm

security vulnerability

nvd

web script

html

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.0.3
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.0
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.0.2
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.0.1
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.1.4
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.1.3
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.1.1
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.1.2
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.1
ibm:tivoli_monitoringibm tivoli monitoringeq6.2.2.1

CPE	Name	Operator	Version
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.0.3
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.0
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.0.2
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.0.1
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.1.4
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.1.3
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.1.1
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.1.2
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.1
ibm:tivoli_monitoring	ibm tivoli monitoring	eq	6.2.2.1

Rows per page:

1-10 of 231

References

www-01.ibm.com/support/docview.wss?uid=swg1IV27192

www-01.ibm.com/support/docview.wss?uid=swg1IV30187

www-01.ibm.com/support/docview.wss?uid=swg1IV40115

www-01.ibm.com/support/docview.wss?uid=swg1IV40116

www-01.ibm.com/support/docview.wss?uid=swg21635080

www-01.ibm.com/support/docview.wss?uid=swg21640752

exchange.xforce.ibmcloud.com/vulnerabilities/82767

5.7 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.8%

JSON

Related for CVE-2013-0548

prion1 cvelist1 ibm2