CVE-2013-0571 Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, a...
LowCVSS 2.9
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm application support facility | = 3.4.0 | No fix listed |
| ibm document connect for application support facility | <= 1.0.0.1204 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- asf-cve20130571-xss(83246) vdb-entry