Ibm Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware vulnerabilities

1 known vulnerability affecting ibm/websphere_datapower_service_gateway_xg45_virtual_edition_firmware.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2013-0499MEDIUMCVSS 4.3v3.8.2v4.0+3 more2013-05-28

CVE-2013-0499 [MEDIUM] CWE-79 CVE-2013-0499: Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA ap Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services.