Unscored severity · published Nov 18, 2013
CVE-2013-5425
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WV
Websphere Virtual Enterprise · Ibm
6.1; 6.1.1; 6.1.1.1; 6.1.1.2; 6.1.1.3; 6.1.1.4; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5425
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1PM93828
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21652405
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/87487
More from Websphere Virtual Enterprise
9.8
CVE-2020-4448
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence…
6.1
CVE-2020-4575
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager…
5.4
CVE-2019-4030
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
5.3
CVE-2019-4505
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL
–
CVE-2015-1932
IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to…