CVE-2013-0565: XSS
Published Apr 24, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS) 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted response.
Affected Software
2 affected components
IBM WebSphere Application Server Feature Pack for Web Services=8.5.0.0
IBM WebSphere Application Server Feature Pack for Web Services=8.5.0.1
Event History
Apr 24, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0565?
CVE-2013-0565 is classified as a medium-severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-0565?
To fix CVE-2013-0565, upgrade to IBM WebSphere Application Server version 8.5.0.2 or later.
3
What types of attacks does CVE-2013-0565 allow?
CVE-2013-0565 allows remote attackers to inject arbitrary web scripts or HTML into the application.
4
Which versions of IBM WebSphere Application Server are affected by CVE-2013-0565?
CVE-2013-0565 affects IBM WebSphere Application Server versions 8.5.0.0 and 8.5.0.1.
5
What is the impact of CVE-2013-0565 on users?
The impact of CVE-2013-0565 can include sessions hijacking, redirection to malicious sites, or exposure of sensitive information.