CVE-2013-5390

IBM WebSphere eXtreme Scale <8.6.0 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg1PM97439

[Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21652630

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/87126

Scores

EPSS 0.0019

EPSS Percentile 40.4%

Details

CWE

CWE-79

Status published

Products (5)

ibm/websphere_extreme_scale

n/a/n/a

Published Oct 16, 2013

Tracked Since Feb 18, 2026