PT-2014-3075 · Ibm · Algo One

Publicado 2014-03-05 · Atualizado 2017-08-29 · CVE-2013-6301

NVD

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6320, and CVE-2013-6333.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-6301

Produtos afetados

Algo One

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-6301 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21666110 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88527 · Nota