CVE-2013-3979 Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cognos Command Center (aka Star Command Center or Star Analytics) before 10.1, when....
LowCVSS 3.5
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cognos Command Center (aka Star Command Center or Star Analytics) before 10.1, when Internet Explorer is used, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm star command center | = 1.6.1 | No fix listed |
| ibm star command center | = 3.0.0 | No fix listed |
| ibm star command center | = 3.0.1 | No fix listed |
| ibm star command center | = 3.0.2 | No fix listed |
| ibm star command center | = 3.0.3 | No fix listed |
| ibm star command center | = 3.0.4 | No fix listed |
| ibm star command center | = 3.0.5 | No fix listed |
| ibm star command center | = 3.0.6 | No fix listed |
| ibm star command center | = 3.0.7 | No fix listed |
References
- 54286 third-party-advisory
- www-01.ibm.com vendor-advisory
- 61419 vdb-entry
- 1028829 vdb-entry
- cognoscc-cve20133979-xss(84904) vdb-entry