CVE-2013-0499 in WebSphere DataPower
摘要 (英语)
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
预定
2012-12-16
披露
2013-05-28
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 8839 | IBM WebSphere DataPower 跨网站脚本 | 79 | 高 | 官方修复 | CVE-2013-0499 |