CVE

Id
66280  
CVE No.
CVE-2013-6333  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320.  
Phase
Assigned (20131031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
644220 66280 CVE-2013-6333 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21666110  View
644221 66280 CVE-2013-6333 XF:ibm-algo-one-cve20136333-xss(89024)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23440 JVNDB-2013-005015 Wireshark の SIP 解析機能の epan/dissectors/packet-sip.c におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の SIP 解析機能の epan/dissectors/packet-sip.c 内の dissect_sip_common 関数は、データ構造を適切に初期化しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2013-6338 66280 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005015.html  View