CVE-2013-5449

2013-12-0418:24:28

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-5449

cross-site scripting

xss vulnerability

ibm

eclipse help system

iehs

infocenter

ibm filenet content manager

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

ibmfilenet_content_managerMatch4.5.1

ibmfilenet_content_managerMatch5.0.0

ibmfilenet_content_managerMatch5.1.0

ibmfilenet_content_managerMatch5.2.0

CPENameOperatorVersion
ibm:filenet_content_manageribm filenet content managereq4.5.1
ibm:filenet_content_manageribm filenet content managereq5.0.0
ibm:filenet_content_manageribm filenet content managereq5.1.0
ibm:filenet_content_manageribm filenet content managereq5.2.0

CPE	Name	Operator	Version
ibm:filenet_content_manager	ibm filenet content manager	eq	4.5.1
ibm:filenet_content_manager	ibm filenet content manager	eq	5.0.0
ibm:filenet_content_manager	ibm filenet content manager	eq	5.1.0
ibm:filenet_content_manager	ibm filenet content manager	eq	5.2.0