Lucene search

[email protected]CVE-2013-6323

HistoryMay 01, 2014 - 5:29 p.m.

CVE-2013-6323

2014-05-0117:29:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-6323

cross-site scripting

xss

ibm websphere

administration console

security vulnerability

nvd

7.1 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.1%

JSON

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CPENameOperatorVersion
ibm:websphere_virtual_enterpriseibm websphere virtual enterpriseeq7.0.0.2
ibm:websphere_virtual_enterpriseibm websphere virtual enterpriseeq7.0.0.3
ibm:websphere_virtual_enterpriseibm websphere virtual enterpriseeq7.0
ibm:websphere_virtual_enterpriseibm websphere virtual enterpriseeq7.0.0.4
ibm:websphere_virtual_enterpriseibm websphere virtual enterpriseeq7.0.0.1
ibm:websphere_application_serveribm websphere application servereq7.0.0.14
ibm:websphere_application_serveribm websphere application servereq7.0.0.12
ibm:websphere_application_serveribm websphere application servereq7.0.0.2
ibm:websphere_application_serveribm websphere application servereq7.0.0.31
ibm:websphere_application_serveribm websphere application servereq7.0.0.24

CPE	Name	Operator	Version
ibm:websphere_virtual_enterprise	ibm websphere virtual enterprise	eq	7.0.0.2
ibm:websphere_virtual_enterprise	ibm websphere virtual enterprise	eq	7.0.0.3
ibm:websphere_virtual_enterprise	ibm websphere virtual enterprise	eq	7.0
ibm:websphere_virtual_enterprise	ibm websphere virtual enterprise	eq	7.0.0.4
ibm:websphere_virtual_enterprise	ibm websphere virtual enterprise	eq	7.0.0.1
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.14
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.12
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.2
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.31
ibm:websphere_application_server	ibm websphere application server	eq	7.0.0.24

Rows per page:

1-10 of 471

References

www-01.ibm.com/support/docview.wss?uid=swg1PI04777

www-01.ibm.com/support/docview.wss?uid=swg1PI04880

www-01.ibm.com/support/docview.wss?uid=swg21669554

www-01.ibm.com/support/docview.wss?uid=swg21676091

www-01.ibm.com/support/docview.wss?uid=swg21676092

www.securityfocus.com/bid/67720

exchange.xforce.ibmcloud.com/vulnerabilities/88903

7.1 High

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

58.1%

JSON

Related for CVE-2013-6323

prion1 openvas1 ibm4 nessus4