CVE-2013-6328: XSS

Published Dec 22, 2013

Updated

Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.

Affected Software

16 affected components

IBM WebSphere Portal=6.1.0.0

IBM WebSphere Portal=6.1.0.1

IBM WebSphere Portal=6.1.0.2

IBM WebSphere Portal=6.1.0.3

IBM WebSphere Portal=6.1.0.4

IBM WebSphere Portal=6.1.0.5

IBM WebSphere Portal=6.1.0.6

IBM WebSphere Portal=6.1.5.0

IBM WebSphere Portal=6.1.5.1

IBM WebSphere Portal=6.1.5.2

IBM WebSphere Portal=6.1.5.3

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.1

Event History

Dec 22, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6328?

CVE-2013-6328 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2013-6328?

To fix CVE-2013-6328, apply the latest patches or updates provided by IBM for your specific version of WebSphere Portal.

What versions of IBM WebSphere Portal are affected by CVE-2013-6328?

CVE-2013-6328 affects IBM WebSphere Portal versions 6.1.0.x through 6.1.0.6, 6.1.5.x through 6.1.5.3, 7.0.0.x through 7.0.0.2, and 8.0.0.x before 8.0.0.1.

What type of vulnerability is CVE-2013-6328?

CVE-2013-6328 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.

Can CVE-2013-6328 be exploited remotely?

Yes, CVE-2013-6328 can be exploited remotely by attackers to execute arbitrary web scripts or HTML.