CVE-2013-6746

IBM Filenet Case Foundation - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

[Vendor Advisory] http://www.ibm.com/support/docview.wss?uid=swg21662360

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/65045

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/89862

[Third Party Advisory] http://secunia.com/advisories/56500

Scores

EPSS 0.0026

EPSS Percentile 48.8%

Details

CWE

CWE-79

Status published

Products (10)

ibm/filenet_case_foundation

ibm/filenet_content_manager

ibm/filenet_content_manager

ibm/filenet_content_manager

ibm/filenet_content_manager

ibm/filenet_content_manager

ibm/filenet_p8_business_process_manager

ibm/filenet_p8_business_process_manager

ibm/filenet_p8_business_process_manager

n/a/n/a

Published Jan 22, 2014

Tracked Since Feb 18, 2026