CVE-2013-4007 — Cross-site Scripting in IBM Advanced Management Module

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
3.5LOWNVD
EPSS
0.2%
top 57.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Advanced Management Module
Timeline
PublishedAug 16
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-6r5m-vvmc-c92m: Cross-site scripting (XSS) vulnerability in adv_sw↗2022-05-17
▶
CVEList
CVE-2013-4007: Cross-site scripting (XSS) vulnerability in adv_sw↗2013-08-16
▶
CVE-2013-4007 — Cross-site Scripting in IBM | cvebase