CVE-2013-4653: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System (AMDS) before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and OmniTouch 8400 Instant Communications Suite before 6.7.3 (1) allow remote attackers to inject arbitrary web script or HTML via a crafted URL that results in a reflected XSS or (2) allow user-assisted remote attackers to inject arbitrary web script or HTML via a user's personal bookmark entry that results in a stored XSS via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4653?
CVE-2013-4653 is considered to have a medium severity level due to potential exploitation through cross-site scripting vulnerabilities.
How do I fix CVE-2013-4653?
To fix CVE-2013-4653, upgrade to the patched versions of the affected Alcatel-Lucent Omnitouch products as outlined in the security advisories.
Which versions are affected by CVE-2013-4653?
CVE-2013-4653 affects MyTeamwork services in versions prior to 6.7 of Omnitouch 8660, 8670, and 8460 products.
What are the potential impacts of exploiting CVE-2013-4653?
Exploiting CVE-2013-4653 could allow an attacker to execute arbitrary scripts in the context of the user's browser, leading to information theft or session hijacking.
Are there any specific user actions needed to mitigate CVE-2013-4653?
Users should avoid using outdated versions of the Alcatel-Lucent software and ensure their systems are updated to mitigate CVE-2013-4653.