CVE-2013-5378: XSS
Published Nov 13, 2013
·Updated
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.
Affected Software
2 affected components
IBM WebSphere Portal=8.0.0.0
IBM WebSphere Portal=8.0.0.1
Event History
Nov 13, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5378?
CVE-2013-5378 is classified as a medium severity vulnerability due to its potential impact on web applications.
2
How do I fix CVE-2013-5378?
To fix CVE-2013-5378, upgrade your IBM WebSphere Portal to version 8.0.0.1 or later.
3
Who is affected by CVE-2013-5378?
CVE-2013-5378 affects users of IBM WebSphere Portal versions 8.0.0.0 and 8.0.0.1.
4
What type of vulnerability is CVE-2013-5378?
CVE-2013-5378 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2013-5378 be exploited remotely?
Yes, CVE-2013-5378 can be exploited by remote authenticated users.