CVE-2013-5421 - Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form

Published Dec 22, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 0.93%

Description

Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www-01.ibm.com/support/docview.wss?uid=swg21660210
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5261
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/87483
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21660210		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-5261		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/87483		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ibm

Published Dec 22, 2013

Updated Aug 6, 2024

Reserved Aug 22, 2013

Link CVE-2013-5421

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-5421

Red Hat

No data

ENISA EUVD

Assigner ibm

Published Dec 22, 2013

Updated Aug 6, 2024

Link EUVD-2013-5261

GitHub

No data