CVE-2013-6746

Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2014-01-22

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Filenet Case Foundation (Ibm)
• Filenet Content Manager (Ibm)
• Filenet P8 Business Process Manager (Ibm)

References

• http://secunia.com/advisories/56500
• http://www.ibm.com/support/docview.wss?uid=swg21662360
• http://www.securityfocus.com/bid/65045
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89862