VulnerabilityModified
CVE-2013-6725
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or…
LOW 3.5EPSS 1.61%
Does this matter?
Lower severity and a low EPSS score (1.61%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
- CVSS 2.0
- 3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
- EPSS
- 1.61% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- ibm/websphere application server
- Source
- psirt@us.ibm.com
References
- http://osvdb.org/102119
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM98132Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21661323Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21661325Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554Vendor Advisory
- http://www.securityfocus.com/bid/65099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89280
- http://osvdb.org/102119
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM98132Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21661323Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21661325Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554Vendor Advisory
- http://www.securityfocus.com/bid/65099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89280
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.