Unscored severity · published Dec 21, 2013
CVE-2013-4045
Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Spss Collaboration And Deployment Services · Ibm
4.2.1; 4.2.1.1; 4.2.1.2; 4.2.1.3; 5.0.0; 5.0.0.1; +1 more · source: NVD
Affected product
SC
Spss Collaboration And Deployment Services
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4045
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4045
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21660191
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/86421
More from Spss Collaboration And Deployment Services
–
CVE-2013-4043
The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via…
–
CVE-2013-4070
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via…
–
CVE-2013-4069
The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML…
–
CVE-2013-4046
Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary…
–
CVE-2013-4044
IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP…