Lucene search
IbmCVE-2013-0466HistoryFeb 20, 2013 - 12:09 p.m.
CVE-2013-0466
2013-02-2012:09:22
CWE-79
ibm
web.nvd.nist.gov
21
cve-2013-0466
cross-site scripting
xss vulnerability
ibm websphere
message broker
soapinput node
wsdl
remote attackers
html
web script
security vulnerability
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
55.1%
Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput node, allows remote attackers to inject arbitrary web script or HTML via a wsdl request that is not properly handled during construction of an error message.
Affected configurations
Node
ibmwebsphere_message_brokerMatch7.0.
ORibmwebsphere_message_brokerMatch7.0.0.1
ORibmwebsphere_message_brokerMatch7.0.0.2
ORibmwebsphere_message_brokerMatch7.0.0.3
ORibmwebsphere_message_brokerMatch7.0.0.4
ORibmwebsphere_message_brokerMatch7.0.0.5
Node
ibmwebsphere_message_brokerMatch8.0
ORibmwebsphere_message_brokerMatch8.0.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_message_broker | 7.0. | cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 7.0.0.1 | cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 7.0.0.2 | cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 7.0.0.3 | cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 7.0.0.4 | cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 7.0.0.5 | cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 8.0 | cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:* |
| ibm | websphere_message_broker | 8.0.0.1 | cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2013-0466
2013-02-20 11:00:00
nvd
nvd
CVE-2013-0466
2013-02-20 12:09:22
prion
prion
Cross site scripting
2013-02-20 12:09:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
55.1%
Related for CVE-2013-0466