CVE-2013-6327

2013-12-1715:21:28

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-6327

cross-site scripting

xss

ibm sterling connect:enterprise

http option

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.5%

JSON

Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a “cross-frame scripting” issue.

Affected configurations

NVD

Node

ibmsterling_connect_enterprise_http_optionMatch1.3.02

ibmsterling_connect_enterprise_http_optionMatch1.4.00

CPENameOperatorVersion
ibm:sterling_connect_enterprise_http_optionibm sterling connect enterprise http optioneq1.3.02
ibm:sterling_connect_enterprise_http_optionibm sterling connect enterprise http optioneq1.4.00

CPE	Name	Operator	Version
ibm:sterling_connect_enterprise_http_option	ibm sterling connect enterprise http option	eq	1.3.02
ibm:sterling_connect_enterprise_http_option	ibm sterling connect enterprise http option	eq	1.4.00