CVE-2013-6320: XSS
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6333.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6320?
CVE-2013-6320 is considered a medium severity vulnerability due to the potential for Cross-site scripting (XSS) attacks.
How do I fix CVE-2013-6320?
To fix CVE-2013-6320, it is recommended to update IBM Algo One to the latest version that has addressed this vulnerability.
What products are affected by CVE-2013-6320?
CVE-2013-6320 affects IBM Algo One versions 4.7.0 to 5.0.0, including MetaData Management Tools and ACSWeb.
Can CVE-2013-6320 be exploited by unprivileged users?
CVE-2013-6320 requires remote authenticated users to exploit the XSS vulnerability.
What type of attack does CVE-2013-6320 enable?
CVE-2013-6320 enables remote authenticated users to inject arbitrary web scripts or HTML into the application.