CVE-2013-0473

Опубликовано: 29 мар. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21626264
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_appscan:5.6.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.0.2:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.1.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.1.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.0.11:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.5.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.5.0.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.6.0.0:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.6.0.1:-:enterprise:*:*:*:*:*

cpe:2.3:a:ibm:security_appscan:8.6.0.2:-:enterprise:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_policy_tester:5.6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_policy_tester:8.5.0.3:*:*:*:*:*:*:*

EPSS

Процентиль: 52%

0.00289

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-p726-gcmp-pjr9

github

почти 4 года назад