CVEvulnerability
CVE-2013-5438
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm flex system manager 1.1.0
• ibm flex system manager 1.3.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_flex_system_manager_web_server_allows_generic_xss_cve_2013_5438 Vendor Advisory
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5094212 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87753 exchange.xforce.ibmcloud.com
- http://www.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_flex_system_manager_web_server_allows_generic_xss_cve_2013_5438 Vendor Advisory
- http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5094212 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87753 exchange.xforce.ibmcloud.com