CVEvulnerability
CVE-2013-0464
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-06-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected configurations
• ibm eclipse help system 3.4.3
• ibm eclipse help system 3.6.2
• ibm spss data collection 6.0
• ibm spss data collection 6.0.1
• ibm spss data collection 7.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/54971 secunia.com
- http://secunia.com/advisories/55115 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21637954 Vendor Advisory
- http://www.securityfocus.com/bid/60246 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81060 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/54971 secunia.com
- http://secunia.com/advisories/55115 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21637954 Vendor Advisory
- http://www.securityfocus.com/bid/60246 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81060 exchange.xforce.ibmcloud.com