CVE-2013-4059

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/86548

http://www.securityfocus.com/bid/66151

http://www-01.ibm.com/support/docview.wss?uid=swg21666684

http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206

http://www-01.ibm.com/support/docview.wss?uid=swg1JR49200

http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815

Details

Source: Mitre, NVD

Published: 2014-03-16

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N