CVEvulnerability
CVE-2013-5449
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm filenet content manager 4.5.1
• ibm filenet content manager 5.0.0
• ibm filenet content manager 5.1.0
• ibm filenet content manager 5.2.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21657493 Vendor Advisory
- http://www.securityfocus.com/bid/64058 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88056 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21657493 Vendor Advisory
- http://www.securityfocus.com/bid/64058 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88056 exchange.xforce.ibmcloud.com