CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4057

Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 49.2%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2013-4057

Ibm » Infosphere Information Server » Version: 8.5

cpe:2.3:a:ibm:infosphere_information_server:8.5
Ibm » Infosphere Information Server » Version: 8.5.0.1

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1
Ibm » Infosphere Information Server » Version: 8.5.0.2

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2
Ibm » Infosphere Information Server » Version: 8.5.0.3

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3
Ibm » Infosphere Information Server » Version: 8.7

cpe:2.3:a:ibm:infosphere_information_server:8.7
Ibm » Infosphere Information Server » Version: 8.7.0.1

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1
Ibm » Infosphere Information Server » Version: 8.7.0.2

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2
Ibm » Infosphere Information Server » Version: 9.1

cpe:2.3:a:ibm:infosphere_information_server:9.1
Ibm » Infosphere Information Server » Version: 9.1.0.1

cpe:2.3:a:ibm:infosphere_information_server:9.1.0.1
Ibm » Infosphere Information Server » Version: 9.1.2

cpe:2.3:a:ibm:infosphere_information_server:9.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4057

Products

Pricing

Contact Us