CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5425

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 69.9%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2013-5425

Ibm » Websphere Virtual Enterprise » Version: 6.1

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1
Ibm » Websphere Virtual Enterprise » Version: 6.1.1

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1.1
Ibm » Websphere Virtual Enterprise » Version: 6.1.1.1

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1.1.1
Ibm » Websphere Virtual Enterprise » Version: 6.1.1.2

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1.1.2
Ibm » Websphere Virtual Enterprise » Version: 6.1.1.3

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1.1.3
Ibm » Websphere Virtual Enterprise » Version: 6.1.1.4

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1.1.4
Ibm » Websphere Virtual Enterprise » Version: 6.1.1.5

cpe:2.3:a:ibm:websphere_virtual_enterprise:6.1.1.5
Ibm » Websphere Virtual Enterprise » Version: 7.0

cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0
Ibm » Websphere Virtual Enterprise » Version: 7.0.0.1

cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0.0.1
Ibm » Websphere Virtual Enterprise » Version: 7.0.0.2

cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0.0.2
Ibm » Websphere Virtual Enterprise » Version: 7.0.0.3

cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5425

Products

Pricing

Contact Us