NVD

Id
41646  
Name
CVE-2013-6735  
Description
IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-12-22  
Modified Date
2016-09-15  
Seq
2013-6735  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210653 41646 CVE-2013-6735 http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-Injection.html  View
210654 41646 CVE-2013-6735 PI07777  View
210655 41646 CVE-2013-6735 http://www-01.ibm.com/support/docview.wss?uid=swg21660289  View
210656 41646 CVE-2013-6735 20131227 SEC Consult SA-20131227-0 :: IBM Web Content Manager (WCM) XPath Injection  View
210657 41646 CVE-2013-6735 64496  View
210658 41646 CVE-2013-6735 1029539  View
210659 41646 CVE-2013-6735 ibm-wsportal-cve20136735-jcr(89591)  View
210660 41646 CVE-2013-6735 https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_fix_available_for_unauthorized_information_retrieval_security_vulnerability_in_ibm_websphere_portal_cve_2013_6735  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24108 JVNDB-2013-005683 IBM WebSphere Portal における重要な Java Content Repository 情報を取得される脆弱性 IBM WebSphere Portal には、重要な Java Content Repository (JCR) 情報を取得される脆弱性が存在します。 CVE-2013-6735 66677 CVE-2013-6735 41646 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005683.html 2013-12-20 2014-02-20 View