CVEvulnerability
CVE-2013-0565
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-04-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS) 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response.
Affected configurations
• ibm websphere application server 8.5.0.0
• ibm websphere application server 8.5.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM83402 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83138 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?&uid=swg21632423 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM83402 www-01.ibm.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83138 exchange.xforce.ibmcloud.com