CVE-2013-0542: XSS
Published Apr 24, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via crafted field values.
Affected Software
54 affected components
IBM WebSphere Application Server Feature Pack for Web Services<=6.1.0.45
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.0
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.1
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.2
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.3
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.5
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.7
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.9
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.11
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.12
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.13
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.14
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.15
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.17
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.19
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.21
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.23
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.25
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.27
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.29
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.31
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.33
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.35
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.37
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.39
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.41
IBM WebSphere Application Server Feature Pack for Web Services=6.1.0.43
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.4
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.5
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.6
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.7
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.8
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.9
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.11
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.13
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.15
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.17
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.19
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.21
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.23
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.25
IBM WebSphere Application Server Feature Pack for Web Services=7.0.0.27
IBM WebSphere Application Server Feature Pack for Web Services=8.0.0.0
IBM WebSphere Application Server Feature Pack for Web Services=8.0.0.1
IBM WebSphere Application Server Feature Pack for Web Services=8.0.0.2
IBM WebSphere Application Server Feature Pack for Web Services=8.0.0.3
IBM WebSphere Application Server Feature Pack for Web Services=8.0.0.4
IBM WebSphere Application Server Feature Pack for Web Services=8.0.0.5
IBM WebSphere Application Server Feature Pack for Web Services=8.5.0.0
IBM WebSphere Application Server Feature Pack for Web Services=8.5.0.1
Event History
Apr 24, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0542?
The severity of CVE-2013-0542 is rated as moderate due to its potential impact on user data through XSS exploits.
2
How do I fix CVE-2013-0542?
To fix CVE-2013-0542, you should upgrade your IBM WebSphere Application Server to one of the patched versions listed in the vulnerability report.
3
Which versions of IBM WebSphere Application Server are affected by CVE-2013-0542?
Versions 6.1 up to 6.1.0.45, 7.0 up to 7.0.0.29, 8.0 up to 8.0.0.6, and 8.5 up to 8.5.0.2 are affected by CVE-2013-0542.
4
What type of attack does CVE-2013-0542 enable?
CVE-2013-0542 enables remote attackers to inject arbitrary web scripts or HTML into the Administrative console.
5
Is user authentication safe from CVE-2013-0542?
CVE-2013-0542 does not directly compromise user authentication; however, it can lead to unauthorized actions and security breaches.