PT-2014-3089 · Ibm · Algo One

Publicado 2014-03-05 · Atualizado 2017-08-29 · CVE-2013-6320

NVD

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6333.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-6320

Produtos afetados

Algo One

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/88603 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21666110 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-6320 · Nota de Segurança