CVE-2013-5449
IBM FileNet Content Manager - Cross-Site Scripting in workingSet.jsp
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/64058
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/88056
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21657493
Scores
EPSS
0.0115
EPSS Percentile
63.5%
Details
CWE
CWE-79
Status
published
Products (4)
ibm/filenet_content_manager
4.5.1
ibm/filenet_content_manager
5.0.0
ibm/filenet_content_manager
5.1.0
ibm/filenet_content_manager
5.2.0
Published
Dec 04, 2013
Tracked Since
Feb 18, 2026