Unscored severity · published Jan 9, 2013
CVE-2013-0009
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted…
–
CVSS
13.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
System Center Operations Manager · Microsoft
2007; 2007 · source: NVD
Affected product
SC
System Center Operations Manager
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0009
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0009
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA13-008A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15760
More from System Center Operations Manager
9.8
CVE-2021-38647
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
7.8
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability
7.8
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability
7.0
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability
9.8
CVE-2024-21334
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability