CVE-2013-0502

Опубликовано: 01 апр. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server 8.1, 8.5 through FP3, 8.7 through FP2, and 9.1 allows remote attackers to inject arbitrary web script or HTML via a malformed URL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_information_server:8.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:8.7.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00266

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-mxmx-74f6-xcg9

github

почти 4 года назад