CVEvulnerability
CVE-2013-5378
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-11-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.
Affected configurations
• ibm websphere portal 8.0.0.0
• ibm websphere portal 8.0.0.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95802 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95881 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21655634 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86929 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95802 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM95881 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21655634 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86929 exchange.xforce.ibmcloud.com