CVE-2013-0466
published 2013-02-20CVE-2013-0466: Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput…
PriorityP49low2.6CVSS 2.0
AVNACHAuNCNIPAN
EPSS
1.14%
62.9th percentile
Cross-site scripting (XSS) vulnerability in IBM WebSphere Message Broker 7.0 before 7.0.0.6 and 8.0 before 8.0.0.2, when wsdl support is enabled on a SOAPInput node, allows remote attackers to inject arbitrary web script or HTML via a wsdl request that is not properly handled during construction of an error message.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
| ibm | websphere_message_broker | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg1IC89383http://www-01.ibm.com/support/docview.wss?uid=swg21623316https://exchange.xforce.ibmcloud.com/vulnerabilities/81062http://www-01.ibm.com/support/docview.wss?uid=swg1IC89383http://www-01.ibm.com/support/docview.wss?uid=swg21623316https://exchange.xforce.ibmcloud.com/vulnerabilities/81062
2013-02-20
Published