CVE-2013-5378

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.

Score

CVSS 2.0 3.5 Low

Status

Modified - psirt@us.ibm.com

Published

2013-11-13

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Websphere Portal (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM95802
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM95881
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593
• http://www-01.ibm.com/support/docview.wss?uid=swg21655634
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86929