Unscored severity · published Oct 16, 2013
CVE-2013-5390
Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Websphere Extreme Scale · Ibm
7.1.0; 7.1.1; 8.5.0; 8.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5390
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5390
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21652630
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/87126
More from Websphere Extreme Scale
10.0
CVE-2026-13773
IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport Protocol
9.9
CVE-2026-13772
IBM WebSphere eXtreme Scale's OQL is affected by remote code execution
8.8
CVE-2026-13759
IBM WebSphere eXtreme Scale is affected by Insecure Deserilization
6.5
CVE-2026-9002
IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabled
6.1
CVE-2019-4109
IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim