CVEvulnerability
CVE-2013-6746
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm filenet case foundation 5.2.0
• ibm filenet content manager 4.5.0
• ibm filenet content manager 4.5.1
• ibm filenet content manager 5.0.0
• ibm filenet content manager 5.1.0
• ibm filenet content manager 5.2.0
• ibm filenet p8 business process manager 4.5.1
• ibm filenet p8 business process manager 5.0.0
• ibm filenet p8 business process manager 5.1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/56500 secunia.com
- http://www.ibm.com/support/docview.wss?uid=swg21662360 Vendor Advisory
- http://www.securityfocus.com/bid/65045 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89862 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/56500 secunia.com
- http://www.ibm.com/support/docview.wss?uid=swg21662360 Vendor Advisory
- http://www.securityfocus.com/bid/65045 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89862 exchange.xforce.ibmcloud.com