Vulnerability Details CVE-2013-5376
Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.5%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2013-5376
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.0.0
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.2.0
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.3.2.3
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.0
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.0.4
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.1.0
-
cpe:2.3:a:ibm:storwize_v7000_unified_software:1.4.1.1
-
cpe:2.3:h:ibm:storwize_v7000_unified:-