CVEvulnerability
CVE-2013-3979
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-07-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cognos Command Center (aka Star Command Center or Star Analytics) before 10.1, when Internet Explorer is used, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm star command center 1.6.1
• ibm star command center 3.0.0
• ibm star command center 3.0.1
• ibm star command center 3.0.2
• ibm star command center 3.0.3
• ibm star command center 3.0.4
• ibm star command center 3.0.5
• ibm star command center 3.0.6
• ibm star command center 3.0.7
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/54286 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21643067 Vendor Advisory
- http://www.securityfocus.com/bid/61419 www.securityfocus.com
- http://www.securitytracker.com/id/1028829 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84904 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/54286 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21643067 Vendor Advisory
- http://www.securityfocus.com/bid/61419 www.securityfocus.com
- http://www.securitytracker.com/id/1028829 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84904 exchange.xforce.ibmcloud.com