CVE-2013-5394

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.9MEDIUM
EPSS
0.2%
top 63.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Extreme Scale
Timeline
PublishedOct 16
Latest updateMay 17

Description

The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 6.8 | Impact: 4.9

Affected Packages1 packages

▶NVDibm/websphere_extreme_scale4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-9jw7-mw5h-3mcm: The monitoring console in IBM WebSphere eXtreme Scale 7↗2022-05-17
▶
CVEList
CVE-2013-5394: The monitoring console in IBM WebSphere eXtreme Scale 7↗2013-10-16
▶
CVE-2013-5394 (MEDIUM CVSS 4.9) | The monitoring console in IBM WebSp | cvebase.io