CVE-2013-4066 — Improper Input Validation in IBM Infosphere Information Server

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 54.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Infosphere Information Server
Timeline
PublishedOct 2
Latest updateMay 17

Description

IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-6gfm-jphj-26p6: IBM InfoSphere Information Server 8↗2022-05-17
▶
CVEList
CVE-2013-4066: IBM InfoSphere Information Server 8↗2013-10-02
▶
CVE-2013-4066 — Improper Input Validation in IBM | cvebase