CVE-2013-4007

The CVE-2013-4007 entry concerns a Cross-Site Scripting (XSS) vulnerability in IBM BladeCenter’s Advanced Management Module (AMM), specifically in the adv_sw.php page. Affected firmware versions are BBET before BBET64G and BPET before BPET64G. The underlying issue allows a remote attacker to exec...

CVE-2013-4007: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...