CVE-2013-6725: XSS
First published: Thu Jan 16 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM WebSphere Application Server with Web Server Plug-ins | =6.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.2 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.3 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.4 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.5 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.6 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.7 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.8 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.9 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.10 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.11 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.12 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.13 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.14 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.15 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.16 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.17 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.18 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.19 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.21 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.22 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.23 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.24 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.25 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.27 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =7.0.0.29 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.2 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.3 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.4 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.5 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.6 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.0.0.7 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.1 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.0.2 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.5.0 | |
| IBM WebSphere Application Server with Web Server Plug-ins | =8.5.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/102119
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM98132
- http://www-01.ibm.com/support/docview.wss?uid=swg21661323
- http://www-01.ibm.com/support/docview.wss?uid=swg21661325
- http://www-01.ibm.com/support/docview.wss?uid=swg21669554
- http://www.securityfocus.com/bid/65099
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89280
Frequently Asked Questions
What is the severity of CVE-2013-6725?
CVE-2013-6725 has a medium severity rating due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-6725?
Fix CVE-2013-6725 by updating IBM WebSphere Application Server to the latest version that addresses this vulnerability.
What versions are affected by CVE-2013-6725?
CVE-2013-6725 affects IBM WebSphere Application Server versions 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2.
Can CVE-2013-6725 be exploited remotely?
Yes, CVE-2013-6725 can be exploited remotely by an authenticated administrator through a crafted URL.
What type of vulnerability is CVE-2013-6725?
CVE-2013-6725 is a cross-site scripting (XSS) vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/softwarecombine
- vendor/ibm
- canonical/ibm websphere application server with web server plug-ins
- version/ibm websphere application server with web server plug-ins/6.1
- version/ibm websphere application server with web server plug-ins/7.0
- version/ibm websphere application server with web server plug-ins/7.0.0.1
- version/ibm websphere application server with web server plug-ins/7.0.0.2
- version/ibm websphere application server with web server plug-ins/7.0.0.3
- version/ibm websphere application server with web server plug-ins/7.0.0.4
- version/ibm websphere application server with web server plug-ins/7.0.0.5
- version/ibm websphere application server with web server plug-ins/7.0.0.6
- version/ibm websphere application server with web server plug-ins/7.0.0.7
- version/ibm websphere application server with web server plug-ins/7.0.0.8
- version/ibm websphere application server with web server plug-ins/7.0.0.9
- version/ibm websphere application server with web server plug-ins/7.0.0.10
- version/ibm websphere application server with web server plug-ins/7.0.0.11
- version/ibm websphere application server with web server plug-ins/7.0.0.12
- version/ibm websphere application server with web server plug-ins/7.0.0.13
- version/ibm websphere application server with web server plug-ins/7.0.0.14
- version/ibm websphere application server with web server plug-ins/7.0.0.15
- version/ibm websphere application server with web server plug-ins/7.0.0.16
- version/ibm websphere application server with web server plug-ins/7.0.0.17
- version/ibm websphere application server with web server plug-ins/7.0.0.18
- version/ibm websphere application server with web server plug-ins/7.0.0.19
- version/ibm websphere application server with web server plug-ins/7.0.0.21
- version/ibm websphere application server with web server plug-ins/7.0.0.22
- version/ibm websphere application server with web server plug-ins/7.0.0.23
- version/ibm websphere application server with web server plug-ins/7.0.0.24
- version/ibm websphere application server with web server plug-ins/7.0.0.25
- version/ibm websphere application server with web server plug-ins/7.0.0.27
- version/ibm websphere application server with web server plug-ins/7.0.0.29
- version/ibm websphere application server with web server plug-ins/8.0.0.0
- version/ibm websphere application server with web server plug-ins/8.0.0.1
- version/ibm websphere application server with web server plug-ins/8.0.0.2
- version/ibm websphere application server with web server plug-ins/8.0.0.3
- version/ibm websphere application server with web server plug-ins/8.0.0.4
- version/ibm websphere application server with web server plug-ins/8.0.0.5
- version/ibm websphere application server with web server plug-ins/8.0.0.6
- version/ibm websphere application server with web server plug-ins/8.0.0.7
- version/ibm websphere application server with web server plug-ins/8.5.0.0
- version/ibm websphere application server with web server plug-ins/8.5.0.1
- version/ibm websphere application server with web server plug-ins/8.5.0.2
- version/ibm websphere application server with web server plug-ins/8.5.5.0
- version/ibm websphere application server with web server plug-ins/8.5.5.1