First published: Fri Aug 16 2013(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2) Portal 7.0.0.2, (3) Portal 8.0, or (4) PortalWeb2 theme.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM WebSphere Portal | <=8.0.0.1 | |
IBM WebSphere Portal | =5.1.0.0 | |
IBM WebSphere Portal | =5.1.0.1 | |
IBM WebSphere Portal | =5.1.0.2 | |
IBM WebSphere Portal | =5.1.0.3 | |
IBM WebSphere Portal | =5.1.0.4 | |
IBM WebSphere Portal | =5.1.0.5 | |
IBM WebSphere Portal | =6.0.0.0 | |
IBM WebSphere Portal | =6.0.0.1 | |
IBM WebSphere Portal | =6.0.0.2 | |
IBM WebSphere Portal | =6.0.0.3 | |
IBM WebSphere Portal | =6.0.0.4 | |
IBM WebSphere Portal | =6.0.1.0 | |
IBM WebSphere Portal | =6.0.1.1 | |
IBM WebSphere Portal | =6.0.1.2 | |
IBM WebSphere Portal | =6.0.1.3 | |
IBM WebSphere Portal | =6.0.1.4 | |
IBM WebSphere Portal | =6.0.1.5 | |
IBM WebSphere Portal | =6.0.1.5-wp6015_008_01 | |
IBM WebSphere Portal | =6.0.1.6 | |
IBM WebSphere Portal | =6.0.1.7 | |
IBM WebSphere Portal | =6.1.0.0 | |
IBM WebSphere Portal | =6.1.0.1 | |
IBM WebSphere Portal | =6.1.0.2 | |
IBM WebSphere Portal | =6.1.0.3 | |
IBM WebSphere Portal | =6.1.5.0 | |
IBM WebSphere Portal | =7.0.0.0 | |
IBM WebSphere Portal | =7.0.0.0-cf001 | |
IBM WebSphere Portal | =7.0.0.1 | |
IBM WebSphere Portal | =7.0.0.1-cf002 | |
IBM WebSphere Portal | =7.0.0.1-cf003 | |
IBM WebSphere Portal | =7.0.0.1-cf004 | |
IBM WebSphere Portal | =7.0.0.1-cf005 | |
IBM WebSphere Portal | =7.0.0.1-cf006 | |
IBM WebSphere Portal | =7.0.0.1-cf007 | |
IBM WebSphere Portal | =7.0.0.1-cf008 | |
IBM WebSphere Portal | =7.0.0.1-cf009 | |
IBM WebSphere Portal | =7.0.0.1-cf010 | |
IBM WebSphere Portal | =7.0.0.1-cf019 | |
IBM WebSphere Portal | =7.0.0.2 | |
IBM WebSphere Portal | =7.0.0.2-cf011 | |
IBM WebSphere Portal | =7.0.0.2-cf012 | |
IBM WebSphere Portal | =7.0.0.2-cf013 | |
IBM WebSphere Portal | =7.0.0.2-cf014 | |
IBM WebSphere Portal | =7.0.0.2-cf015 | |
IBM WebSphere Portal | =7.0.0.2-cf016 | |
IBM WebSphere Portal | =7.0.0.2-cf017 | |
IBM WebSphere Portal | =7.0.0.2-cf018 | |
IBM WebSphere Portal | =7.0.0.2-cf019 | |
IBM WebSphere Portal | =7.0.0.2-cf020 | |
IBM WebSphere Portal | =7.0.0.2-cf021 | |
IBM WebSphere Portal | =7.0.0.2-cf022 | |
IBM WebSphere Portal | =8.0 | |
IBM WebSphere Portal | =8.0.0.0 | |
IBM WebSphere Portal | =8.0.0.0-cf01 | |
IBM WebSphere Portal | =8.0.0.0-cf02 | |
IBM WebSphere Portal | =8.0.0.0-cf03 | |
IBM WebSphere Portal | =8.0.0.0-cf04 | |
IBM WebSphere Portal | =8.0.0.0-cf05 | |
IBM WebSphere Portal | =8.0.0.1 | |
IBM WebSphere Portal | =8.0.0.1-cf04 | |
IBM WebSphere Portal | =8.0.0.1-cf05 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-0587 has been classified as a medium severity vulnerability due to its potential impact on the application through XSS attacks.
To fix CVE-2013-0587, ensure you update IBM WebSphere Portal to version 8.0.0.1 CF07 or apply available patches.
CVE-2013-0587 allows remote attackers to perform cross-site scripting attacks, which may lead to session hijacking or information theft.
CVE-2013-0587 affects multiple versions of IBM WebSphere Portal, including 5.1.0.x, 6.0.x, 7.0.0.x, and 8.0.0.x up to 8.0.0.1.
There are no official workarounds released for CVE-2013-0587, so it is recommended to apply the necessary update as soon as possible.