Unscored severity · published Jun 19, 2013
CVE-2013-2969
Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving invalid characters.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Sterling Control Center · Ibm
5.2.0; 5.3.0; 5.3.0.1; 5.3.0.2; 5.3.0.3; 5.4.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2969
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21640348
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/83860
More from Sterling Control Center
6.1
CVE-2023-35894
IBM Control Center 6.2.1 through 6.3.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers
5.4
CVE-2023-42007
IBM Sterling Control Center cross-site scripting
5.3
CVE-2023-35020
IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system
5.1
CVE-2016-0252
IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors
3.3
CVE-2023-43035
IBM Sterling Control Center information disclosure