NVD

Id
41397  
Name
CVE-2013-6323  
Description
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-05-01  
Modified Date
2016-04-06  
Seq
2013-6323  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209116 41397 CVE-2013-6323 PI04777  View
209117 41397 CVE-2013-6323 PI04880  View
209118 41397 CVE-2013-6323 http://www-01.ibm.com/support/docview.wss?uid=swg21669554  View
209119 41397 CVE-2013-6323 http://www-01.ibm.com/support/docview.wss?uid=swg21676091  View
209120 41397 CVE-2013-6323 http://www-01.ibm.com/support/docview.wss?uid=swg21676092  View
209121 41397 CVE-2013-6323 67720  View
209122 41397 CVE-2013-6323 ibm-was-cve20136323-xss(88903)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24814 JVNDB-2013-006389 IBM WebSphere Application Server および WebSphere Virtual Enterprise におけるクロスサイトスクリプティングの脆弱性 IBM WebSphere Application Server (WAS) および WebSphere Virtual Enterprise の管理コンソールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-6323 66265 CVE-2013-6323 41397 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006389.html 2013-10-31 2015-08-07 View