Vulnerability Name: | CVE-2013-5390 (CCN-87126) | ||||||||
Assigned: | 2013-10-11 | ||||||||
Published: | 2013-10-11 | ||||||||
Updated: | 2017-08-29 | ||||||||
Summary: | Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | ||||||||
CVSS v3 Severity: | 2.6 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N)
| ||||||||
CVSS v2 Severity: | 3.5 Low (CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N) 3.0 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-79 | ||||||||
Vulnerability Consequences: | Cross-Site Scripting | ||||||||
References: | Source: MITRE Type: CNA CVE-2013-5390 Source: AIXAPAR Type: Vendor Advisory PM97439 Source: CCN Type: IBM Security Bulletin 1652630 WebSphere eXtreme Scale Monitoring Console Web Vulnerabilities (CVE-2013-5390, CVE-2013-5393, CVE-2013-5394) Source: CONFIRM Type: Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21652630 Source: CCN Type: OSVDB ID: 98434 IBM WebSphere eXtreme Scale Monitoring Console Unspecified Reflected XSS Source: CCN Type: BID-62994 IBM WebSphere eXtreme Scale Monitoring Console CVE-2013-5390 Cross Site Scripting Vulnerability Source: XF Type: UNKNOWN was-es-cve20135390-xss(87126) Source: XF Type: UNKNOWN ws-extremescale-cve20135390-xss(87126) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||
BACK |