CVE-2013-5425

Published: Nov 18, 2013Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected (11)

Products: Ibm: Websphere Virtual Enterprise

Ibm

1 product

Websphere Virtual Enterprise

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Virtual Enterprise	Version 6.1.1.1
Ibm Websphere Virtual Enterprise	Version 6.1.1.2
Ibm Websphere Virtual Enterprise	Version 6.1.1.3
Ibm Websphere Virtual Enterprise	Version 6.1.1.4
Ibm Websphere Virtual Enterprise	Version 6.1.1.5
Ibm Websphere Virtual Enterprise	Version 6.1.1
Ibm Websphere Virtual Enterprise	Version 6.1
Ibm Websphere Virtual Enterprise	Version 7.0.0.1
Ibm Websphere Virtual Enterprise	Version 7.0.0.2
Ibm Websphere Virtual Enterprise	Version 7.0.0.3
Ibm Websphere Virtual Enterprise	Version 7.0