Lucene search

[email protected]NVD:CVE-2013-6327

HistoryDec 17, 2013 - 3:21 p.m.

CVE-2013-6327

2013-12-1715:21:28

CWE-79

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON

Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a “cross-frame scripting” issue.

Affected configurations

NVD

Node

ibmsterling_connect_enterprise_http_optionMatch1.3.02

ibmsterling_connect_enterprise_http_optionMatch1.4.00

References

www-01.ibm.com/support/docview.wss?uid=swg21659907

exchange.xforce.ibmcloud.com/vulnerabilities/88908

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.3%

JSON

Related for NVD:CVE-2013-6327

cve1 seebug1 prion1 cvelist1 ibm1