CVE-2013-0549: XSS

Published Jun 3, 2013

Updated

Cross-site scripting (XSS) vulnerability in the Web Content Manager - Web Content Viewer Portlet in the server in IBM WebSphere Portal 7.0.0.x through 7.0.0.2 CF22 and 8.0.0.x through 8.0.0.1 CF5, when the IBM Portlet API is used, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected Software

34 affected components

IBM WebSphere Portal=7.0.0.0-cf001

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.1-cf002

IBM WebSphere Portal=7.0.0.1-cf003

IBM WebSphere Portal=7.0.0.1-cf004

IBM WebSphere Portal=7.0.0.1-cf005

IBM WebSphere Portal=7.0.0.1-cf006

IBM WebSphere Portal=7.0.0.1-cf007

IBM WebSphere Portal=7.0.0.1-cf008

IBM WebSphere Portal=7.0.0.1-cf009

IBM WebSphere Portal=7.0.0.1-cf010

IBM WebSphere Portal=7.0.0.1-cf019

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=7.0.0.2-cf011

IBM WebSphere Portal=7.0.0.2-cf012

IBM WebSphere Portal=7.0.0.2-cf013

IBM WebSphere Portal=7.0.0.2-cf014

IBM WebSphere Portal=7.0.0.2-cf015

IBM WebSphere Portal=7.0.0.2-cf016

IBM WebSphere Portal=7.0.0.2-cf017

IBM WebSphere Portal=7.0.0.2-cf018

IBM WebSphere Portal=7.0.0.2-cf019

IBM WebSphere Portal=7.0.0.2-cf020

IBM WebSphere Portal=7.0.0.2-cf021

IBM WebSphere Portal=7.0.0.2-cf022

IBM WebSphere Portal=8.0

IBM WebSphere Portal=8.0.0.0-cf01

IBM WebSphere Portal=8.0.0.0-cf02

IBM WebSphere Portal=8.0.0.0-cf03

IBM WebSphere Portal=8.0.0.0-cf04

IBM WebSphere Portal=8.0.0.0-cf05

IBM WebSphere Portal=8.0.0.1

IBM WebSphere Portal=8.0.0.1-cf04

IBM WebSphere Portal=8.0.0.1-cf05

Event History

Jun 3, 2013

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0549?

CVE-2013-0549 is classified as a medium severity vulnerability due to its potential for exploit through cross-site scripting.

How do I fix CVE-2013-0549?

To fix CVE-2013-0549, you should apply the latest patches provided by IBM for affected versions of WebSphere Portal.

What software versions are affected by CVE-2013-0549?

CVE-2013-0549 affects IBM WebSphere Portal versions 7.0.0.x up to 7.0.0.2 CF22 and 8.0.0.x up to 8.0.0.1 CF5.

What is the nature of CVE-2013-0549?

CVE-2013-0549 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.

Who can exploit CVE-2013-0549?

CVE-2013-0549 can be exploited by remote attackers with access to the Web Content Viewer Portlet when the IBM Portlet API is used.