CVE-2013-4946: XSS
Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to inject arbitrary web script or HTML via the (1) SelTab parameter to QVadmin.aspx, the (2) CallBack parameter to QVgrid.aspx, or the (3) HelpPage parameter to commonhelp.aspx.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4946?
CVE-2013-4946 is considered a medium severity vulnerability due to multiple cross-site scripting (XSS) weaknesses.
How do I fix CVE-2013-4946?
To fix CVE-2013-4946, you should apply the latest security patches provided by BMC for Service Desk Express version 10.2.1.95.
What are the exploit targets in CVE-2013-4946?
The exploit targets in CVE-2013-4946 include the SelTab parameter in QV_admin.aspx, the CallBack parameter in QV_grid.aspx, and the HelpPage parameter in commonhelp.aspx.
Who is affected by CVE-2013-4946?
CVE-2013-4946 affects all installations of BMC Service Desk Express version 10.2.1.95.
What type of vulnerability is CVE-2013-4946?
CVE-2013-4946 is classified as a cross-site scripting (XSS) vulnerability.