CVE-2013-6333

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-6300

CVE-2013-6300 is a cross-site scripting (XSS) vulnerability affecting IBM Algo One as used in MetaData Management Tools in UDS 4.7.0–5.0.0, and in ACSWeb for Algo Security Access Control Management 4.7.0–4.9.0, plus AlgoWebApps 5.0.0. The issue allows remote authenticated users to inject arbitrar...

CVE-2013-6318

CVE-2013-6318 is an XSS vulnerability affecting IBM Algo One components: MetaData Management Tools in UDS 4.7.0–5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0–4.9.0, and ACSWeb in AlgoWebApps 5.0.0. It enables remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2013-6301

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-6320

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-6318

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote attackers to inject arbitrary web script or HTML via...

CVE-2013-6299

Technical details for CVE-2013-6299 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2013-6302

CVE-2013-6302 is a SQL injection vulnerability affecting IBM Algo One as used in MetaData Management Tools (UDS 4.7.0–5.0.0), ACSWeb in Algo Security Access Control Management (4.7.0–4.9.0), and ACSWebApps (5.0.0). The underlying issue allows remote authenticated users to execute arbitrary SQL vi...

CVE-2013-6301

CVE-2013-6301 is an XSS vulnerability in IBM Algo One used by MetaData Management Tools in UDS 4.7.0–5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0–4.9.0, and ACSWeb in AlgoWebApps 5.0.0. It allows remote authenticated users to inject arbitrary web script or HTML via unspecified v...

CVE-2013-6303

CVE-2013-6303 is a directory traversal vulnerability in IBM Algo One components: MetaData Management Tools (UDS 4.7.0–5.0.0), Algo Security Access Control Management (ACSWeb 4.7.0–4.9.0), and AlgoWebApps (ACSWeb 5.0.0). The underlying issue allows remote authenticated users to read arbitrary file...

CVE-2013-6299

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-6319

IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to bypass intended access restrictions and read content via unspecified vectors...

CVE-2013-6300

Cross-site scripting XSS vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML...

CVE-2013-5468

IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the...

CVE-2013-6320

CVE-2013-6320 is an XSS vulnerability affecting IBM Algo One as used in MetaData Management Tools (UDS 4.7.0–5.0.0), and in Algo Security Access Control Management (ACSWeb in Algo) (4.7.0–4.9.0) and AlgoWebApps (5.0.0). The underlying issue is a cross-site scripting flaw that allows remote authen...

CVE-2013-6319

CVE-2013-6319 affects IBM Algo One components: MetaData Management Tools in UDS 4.7.0–5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0–4.9.0, and ACSWeb in AlgoWebApps 5.0.0. The root cause is an authorization bypass that allows remote authenticated users to read restricted content ...

IBM Algo One Algo Risk Application目录遍历漏洞

Bugtraq ID:65929 CVE ID:CVE-2013-6304 IBM Algo One是一个风险管理软件解决方案。 IBM Algo One不正确过滤用户提交的输入，允许远程攻击者利用漏洞提交目录遍历序列请求获取任意文件内容。 0 IBM Algo One 2.x IBM Algo One 4.x 厂商补丁： IBM ----- 用户可参考如下厂商提供的安全补丁以修复该漏洞： https://www.ibm.com/support/docview.wss?uid=swg21666093...

IBM Algo One Algo多个安全漏洞

CVE ID:CVE-2013-6299、CVE-2013-6300、CVE-2013-6301、CVE-2013-6302、CVE-2013-6303、CVE-2013-6318、CVE-2013-6319、CVE-2013-6320、CVE-2013-6331、CVE-2013-6333 IBM Algo One是一个风险管理软件解决方案。 IBM Algo One存在多个安全漏洞： 1，应用程序不正确校验用户权限，允许攻击者利用漏洞获取受限内容。 2，存在多个跨站脚本漏洞，允许攻击者构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。...

CVE-2013-6332

Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it...

Unrestricted file upload

Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it...