CVE-2013-4036
Last modified
CVE-2013-4036 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.. EPSS estimates a 0.76% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Infosphere Master Data Management Server For Product Information Management | 9.0 |
| Ibm | Infosphere Master Data Management Server For Product Information Management | 9.1 |
| Ibm | Infosphere Master Data Management Collaboration Server | 10.0 |
| Ibm | Infosphere Master Data Management Collaboration Server | 10.1 |
| Ibm | Infosphere Master Data Management Collaboration Server | 11.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-4036?
How severe is CVE-2013-4036?
How do I fix CVE-2013-4036?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-4030Integrated Management Module (IMM) 2 1.00 through 2.00 on IB…
- CVE-2013-4031The Intelligent Platform Management Interface (IPMI) impleme…
- CVE-2013-4032The Fast Communications Manager (FCM) in IBM DB2 Enterprise …
- CVE-2013-4033IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10…
- CVE-2013-4034IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 be…
- CVE-2013-4035IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.…
- CVE-2013-4037The RAKP protocol support in the Intelligent Platform Manage…
- CVE-2013-4038The Intelligent Platform Management Interface (IPMI) impleme…
- CVE-2013-4039IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.…
- CVE-2013-4040IBM Tivoli Application Dependency Discovery Manager (TADDM) …
- CVE-2013-4041Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 …
- CVE-2013-4042Unspecified vulnerability in IBM SPSS Collaboration and Depl…
Are you affected by CVE-2013-4036?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST