CVE-2013-4036

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

3.5LOW

EPSS

0.2%

top 62.27%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Infosphere Master Data Management Collaboration Server IBM Infosphere Master Data Management Server FOR Product Information Management

Timeline

PublishedNov 27

Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/infosphere_master_data_management_collaboration_server10.0, 10.1, 11.0+2

▶NVDibm/infosphere_master_data_management9.0, 9.1+1

🔴Vulnerability Details

GHSA

GHSA-3345-6fwj-mp93: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9↗2022-05-17

▶

CVEList

CVE-2013-4036: Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9↗2013-11-27

▶