CVE-2013-6323 Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtua...
LowCVSS 3.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere virtual enterprise | = 7.0 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.1 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.2 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.3 | No fix listed |
| ibm websphere virtual enterprise | = 7.0.0.4 | No fix listed |
| ibm websphere application server | = 7.0 | No fix listed |
| ibm websphere application server | = 7.0.0.1 | No fix listed |
| ibm websphere application server | = 7.0.0.2 | No fix listed |
| ibm websphere application server | = 7.0.0.3 | No fix listed |
| ibm websphere application server | = 7.0.0.4 | No fix listed |
| ibm websphere application server | = 7.0.0.5 | No fix listed |
| ibm websphere application server | = 7.0.0.6 | No fix listed |
| ibm websphere application server | = 7.0.0.7 | No fix listed |
| ibm websphere application server | = 7.0.0.8 | No fix listed |
| ibm websphere application server | = 7.0.0.9 | No fix listed |
| ibm websphere application server | = 7.0.0.10 | No fix listed |
| ibm websphere application server | = 7.0.0.11 | No fix listed |
| ibm websphere application server | = 7.0.0.12 | No fix listed |
| ibm websphere application server | = 7.0.0.13 | No fix listed |
| ibm websphere application server | = 7.0.0.14 | No fix listed |
| ibm websphere application server | = 7.0.0.15 | No fix listed |
| ibm websphere application server | = 7.0.0.16 | No fix listed |
| ibm websphere application server | = 7.0.0.17 | No fix listed |
| ibm websphere application server | = 7.0.0.18 | No fix listed |
| ibm websphere application server | = 7.0.0.19 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 7.0.0.21 | No fix listed |
| ibm websphere application server | = 7.0.0.22 | No fix listed |
| ibm websphere application server | = 7.0.0.23 | No fix listed |
| ibm websphere application server | = 7.0.0.24 | No fix listed |
| ibm websphere application server | = 7.0.0.25 | No fix listed |
| ibm websphere application server | = 7.0.0.27 | No fix listed |
| ibm websphere application server | = 7.0.0.29 | No fix listed |
| ibm websphere application server | = 7.0.0.31 | No fix listed |
| ibm websphere application server | = 8.5.0.0 | No fix listed |
| ibm websphere application server | = 8.5.0.1 | No fix listed |
| ibm websphere application server | = 8.5.0.2 | No fix listed |
| ibm websphere application server | = 8.5.5.0 | No fix listed |
| ibm websphere application server | = 8.5.5.1 | No fix listed |
| ibm websphere application server | = 8.0.0.0 | No fix listed |
| ibm websphere application server | = 8.0.0.1 | No fix listed |
| ibm websphere application server | = 8.0.0.2 | No fix listed |
| ibm websphere application server | = 8.0.0.3 | No fix listed |
| ibm websphere application server | = 8.0.0.4 | No fix listed |
| ibm websphere application server | = 8.0.0.5 | No fix listed |
| ibm websphere application server | = 8.0.0.6 | No fix listed |
| ibm websphere application server | = 8.0.0.7 | No fix listed |
| ibm websphere application server | = 8.0.0.8 | No fix listed |
References
- PI04777 vendor-advisory
- PI04880 vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- www-01.ibm.com vendor-advisory
- 67720 vdb-entry
- ibm-was-cve20136323-xss(88903) vdb-entry