CVE-2013-5376

Published: Oct 17, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.

Affected (8)

Products: Ibm: Storwize V7000 Unified Software, Storwize V7000 Unified

Ibm

2 products

Storwize V7000 Unified Software

Storwize V7000 Unified

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Storwize V7000 Unified Software	Version 1.3.0.0
Ibm Storwize V7000 Unified Software	Version 1.3.2.0
Ibm Storwize V7000 Unified Software	Version 1.3.2.3
Ibm Storwize V7000 Unified Software	Version 1.4.0.0
Ibm Storwize V7000 Unified Software	Version 1.4.0.4
Ibm Storwize V7000 Unified Software	Version 1.4.1.0
Ibm Storwize V7000 Unified Software	Version 1.4.1.1
Ibm Storwize V7000 Unified	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

http://www.ibm.com/support/docview.wss?uid=ssg1S1004452

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86902

Source: psirt@us.ibm.com

http://www.ibm.com/support/docview.wss?uid=ssg1S1004452

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/86902

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.