CVE-2013-0503: XSS
Published Apr 23, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
13 affected components
IBM Lotus Connections<=4.0.0.0
IBM Lotus Connections=1.0.0.0
IBM Lotus Connections=1.0.1.0
IBM Lotus Connections=1.0.2.0
IBM Lotus Connections=2.0.0.0
IBM Lotus Connections=2.0.1.0
IBM Lotus Connections=2.0.1.1
IBM Lotus Connections=2.5.0.1
IBM Lotus Connections=2.5.0.2
IBM Lotus Connections=2.5.0.3
IBM Lotus Connections=3.0.0.0
IBM Lotus Connections=3.0.1.0
IBM Lotus Connections=3.0.1.1
Event History
Apr 23, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0503?
CVE-2013-0503 is considered to be a medium severity cross-site scripting vulnerability.
2
How do I fix CVE-2013-0503?
To fix CVE-2013-0503, upgrade IBM Lotus Connections to version 4.0 CR3 or later.
3
What types of attacks are possible with CVE-2013-0503?
CVE-2013-0503 allows remote attackers to inject arbitrary web scripts or HTML into the application.
4
Which versions of IBM Lotus Connections are affected by CVE-2013-0503?
IBM Lotus Connections versions prior to 4.0 CR3, and several earlier versions including 1.0.x and 2.x series are affected.
5
What is the impact of exploiting CVE-2013-0503?
Exploiting CVE-2013-0503 can lead to unauthorized access and manipulation of content by injecting malicious web scripts.