CVEvulnerability
CVE-2013-4045
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm spss collaboration and deployment services 4.2.1
• ibm spss collaboration and deployment services 4.2.1.1
• ibm spss collaboration and deployment services 4.2.1.2
• ibm spss collaboration and deployment services 4.2.1.3
• ibm spss collaboration and deployment services 5.0.0
• ibm spss collaboration and deployment services 5.0.0.1
• ibm spss collaboration and deployment services 5.0.0.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660191 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86421 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95817 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660191 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86421 exchange.xforce.ibmcloud.com