Lucene search
HistoryMar 06, 2014 - 11:55 a.m.
CVE-2013-6315
cve-2013-6315
information security
ibm
infosphere enterprise records
clickjacking
vulnerability
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.1%
IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 do not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Affected configurations
Node
ibmenterprise_recordsMatch5.1.1
ORibminfosphere_enterprise_recordsMatch4.5.1
Related
prion
prion
Code injection
2014-03-06 11:55:00
nvd
nvd
CVE-2013-6315
2014-03-06 11:55:05
cvelist
cvelist
CVE-2013-6315
2014-03-06 11:00:00
seebug
seebug
IBM Enterprise Records多个输入验证漏洞
2014-03-05 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.1%
Related for CVE-2013-6315