CVE-2013-0566: XSS
First published: Tue Aug 27 2013(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Accelerator JSPs, (2) Organization Administration Console JSPs, and (3) Administration Console JSPs in WebSphere Commerce Tools in IBM WebSphere Commerce 5.6.1.0 through 5.6.1.5, 6.0.0.0 through 6.0.0.11, and 7.0.0.0 through 7.0.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Commerce | =5.6.1 | |
| IBM WebSphere Commerce | =5.6.1.1 | |
| IBM WebSphere Commerce | =5.6.1.2 | |
| IBM WebSphere Commerce | =5.6.1.3 | |
| IBM WebSphere Commerce | =5.6.1.4 | |
| IBM WebSphere Commerce | =5.6.1.5 | |
| IBM WebSphere Commerce | =6.0.0.0 | |
| IBM WebSphere Commerce | =6.0.0.1 | |
| IBM WebSphere Commerce | =6.0.0.2 | |
| IBM WebSphere Commerce | =6.0.0.3 | |
| IBM WebSphere Commerce | =6.0.0.4 | |
| IBM WebSphere Commerce | =6.0.0.5 | |
| IBM WebSphere Commerce | =6.0.0.6 | |
| IBM WebSphere Commerce | =6.0.0.7 | |
| IBM WebSphere Commerce | =6.0.0.8 | |
| IBM WebSphere Commerce | =6.0.0.9 | |
| IBM WebSphere Commerce | =6.0.0.10 | |
| IBM WebSphere Commerce | =6.0.0.11 | |
| IBM WebSphere Commerce | =7.0 | |
| IBM WebSphere Commerce | =7.0.0.1 | |
| IBM WebSphere Commerce | =7.0.0.2 | |
| IBM WebSphere Commerce | =7.0.0.3 | |
| IBM WebSphere Commerce | =7.0.0.4 | |
| IBM WebSphere Commerce | =7.0.0.5 | |
| IBM WebSphere Commerce | =7.0.0.6 | |
| IBM WebSphere Commerce | =7.0.0.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-0566?
The severity of CVE-2013-0566 is classified as moderate due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2013-0566?
To fix CVE-2013-0566, upgrade to IBM WebSphere Commerce versions 5.6.1.6, 6.0.0.12, or 7.0.0.8 or later.
What types of vulnerabilities are associated with CVE-2013-0566?
CVE-2013-0566 is associated with multiple cross-site scripting vulnerabilities across various WebSphere Commerce tools.
Which IBM WebSphere Commerce versions are affected by CVE-2013-0566?
CVE-2013-0566 affects IBM WebSphere Commerce versions 5.6.1.0 to 5.6.1.5, 6.0.0.0 to 6.0.0.11, and 7.0.0.0 to 7.0.0.7.
What could be the impact of exploiting CVE-2013-0566?
Exploiting CVE-2013-0566 could allow an attacker to execute scripts in the context of an affected user session, potentially leading to data theft or account compromise.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm websphere commerce
- version/ibm websphere commerce/5.6.1
- version/ibm websphere commerce/5.6.1.1
- version/ibm websphere commerce/5.6.1.2
- version/ibm websphere commerce/5.6.1.3
- version/ibm websphere commerce/5.6.1.4
- version/ibm websphere commerce/5.6.1.5
- version/ibm websphere commerce/6.0.0.0
- version/ibm websphere commerce/6.0.0.1
- version/ibm websphere commerce/6.0.0.2
- version/ibm websphere commerce/6.0.0.3
- version/ibm websphere commerce/6.0.0.4
- version/ibm websphere commerce/6.0.0.5
- version/ibm websphere commerce/6.0.0.6
- version/ibm websphere commerce/6.0.0.7
- version/ibm websphere commerce/6.0.0.8
- version/ibm websphere commerce/6.0.0.9
- version/ibm websphere commerce/6.0.0.10
- version/ibm websphere commerce/6.0.0.11
- version/ibm websphere commerce/7.0
- version/ibm websphere commerce/7.0.0.1
- version/ibm websphere commerce/7.0.0.2
- version/ibm websphere commerce/7.0.0.3
- version/ibm websphere commerce/7.0.0.4
- version/ibm websphere commerce/7.0.0.5
- version/ibm websphere commerce/7.0.0.6
- version/ibm websphere commerce/7.0.0.7