CVE-2013-2299: XSS
Published Aug 22, 2013
·Updated
Cross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess) before 7.1 2013.05.30 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
3 affected components
Advantech Advantech WebAccess<=7.0
Advantech Advantech WebAccess=5.0
Advantech Advantech WebAccess=6.0
Event History
Aug 22, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-2299?
CVE-2013-2299 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-2299?
To mitigate CVE-2013-2299, upgrade Advantech WebAccess to version 7.1 or later.
3
Who is affected by CVE-2013-2299?
CVE-2013-2299 affects users of Advantech WebAccess versions 5.0, 6.0, and all versions prior to 7.1.
4
What type of vulnerability is CVE-2013-2299?
CVE-2013-2299 is a cross-site scripting (XSS) vulnerability that allows injection of arbitrary web scripts.
5
Can unauthenticated users exploit CVE-2013-2299?
No, CVE-2013-2299 requires remote authenticated users to exploit the vulnerability.