CVE-2013-6328
Last modified
CVE-2013-6328 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.. EPSS estimates a 1.16% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Websphere Portal | 6.1.0.0 |
| Ibm | Websphere Portal | 6.1.0.1 |
| Ibm | Websphere Portal | 6.1.0.2 |
| Ibm | Websphere Portal | 6.1.0.3 |
| Ibm | Websphere Portal | 6.1.0.4 |
| Ibm | Websphere Portal | 6.1.0.5 |
| Ibm | Websphere Portal | 6.1.0.6 |
| Ibm | Websphere Portal | 6.1.5.0 |
| Ibm | Websphere Portal | 6.1.5.1 |
| Ibm | Websphere Portal | 6.1.5.2 |
| Ibm | Websphere Portal | 6.1.5.3 |
| Ibm | Websphere Portal | 7.0.0.0 |
| Ibm | Websphere Portal | 7.0.0.1 |
| Ibm | Websphere Portal | 7.0.0.2 |
| Ibm | Websphere Portal | 8.0.0.0 |
| Ibm | Websphere Portal | 8.0.0.1 |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21660011Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21660011Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-6328?
How severe is CVE-2013-6328?
How do I fix CVE-2013-6328?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-6320Cross-site scripting (XSS) vulnerability in IBM Algo One, as…
- CVE-2013-6321SQL injection vulnerability in IBM Atlas eDiscovery Process …
- CVE-2013-6322Cross-site scripting (XSS) vulnerability in Sterling Order M…
- CVE-2013-6323Cross-site scripting (XSS) vulnerability in the Administrati…
- CVE-2013-6325IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x …
- CVE-2013-6327Cross-site scripting (XSS) vulnerability in the HTTP Option …
- CVE-2013-6329IBM Global Security Kit (aka GSKit), as used in Content Mana…
- CVE-2013-6330IBM WebSphere Application Server 7.x before 7.0.0.31, when s…
- CVE-2013-6331SQL injection vulnerability in IBM Algo One, as used in Meta…
- CVE-2013-6332Unrestricted file upload vulnerability in IBM Algo One UDS 4…
- CVE-2013-6333Cross-site scripting (XSS) vulnerability in IBM Algo One, as…
- CVE-2013-6334IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier …
Are you affected by CVE-2013-6328?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST