VulnerabilityModified

CVE-2013-6308

IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection.

MEDIUM 4.9EPSS 0.85%

Does this matter?

Lower severity and a low EPSS score (0.85%). Track it; it rarely justifies an emergency change on its own.

Description

IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection.

CVSS 2.0: 4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
EPSS: 0.85% probability · 56th percentile
CISA KEV: Not listed
Affected: ibm/marketing platform
Source: psirt@us.ibm.com

References

http://www-01.ibm.com/support/docview.wss?uid=swg21676688Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88558
http://www-01.ibm.com/support/docview.wss?uid=swg21676688Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/88558

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.