CVE-2013-0572

Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.

Score

CVSS 2.0 2.3 Low

Status

Modified - psirt@us.ibm.com

Published

2013-04-27

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Application Support Facility (Ibm)
• Document Connect For Application Support Facility (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21635328
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83247