CVE-2013-0572 Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, a...
LowCVSS 2.3
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm application support facility | = 3.4.0 | No fix listed |
| ibm document connect for application support facility | <= 1.0.0.1204 | No fix listed |
References
- www-01.ibm.com vendor-advisory
- asf-cve20130572-spoofing(83247) vdb-entry