Unscored severity · published Mar 29, 2013
CVE-2013-0473
Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rational Policy Tester · Ibm
5.6.0.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.1.0; 8.0.1.1; +4 more · source: NVD
SA
Security Appscan · Ibm
5.6.0.0; 8.0.0.0; 8.0.0.1; 8.0.0.2; 8.0.1.0; 8.0.1.1; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0473
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0473
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337
More from Rational Policy Tester
–
CVE-2013-4062
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain…
–
CVE-2013-4061
IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to…
–
CVE-2013-0532
Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote…
–
CVE-2013-0513
IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (double quote) characters in the…
–
CVE-2013-0512
Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x…