CVE-2013-6735

medium

Description

IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.

References

Advisories
More

https://www-304.ibm.com/connections/blogs/PSIRT/entry/security_bulletin_fix_available_for_unauthorized_information_retrieval_security_vulnerability_in_ibm_websphere_portal_cve_2013_6735

http://www.securitytracker.com/id/1029539

http://www.securityfocus.com/bid/64496

https://exchange.xforce.ibmcloud.com/vulnerabilities/89591

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6537

http://www.securityfocus.com/archive/1/530552/100/0/threaded

http://www-01.ibm.com/support/docview.wss?uid=swg21660289

http://www-01.ibm.com/support/docview.wss?uid=swg1PI07777

http://secunia.com/advisories/56161

http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-Injection.html

http://osvdb.org/101255

Details

Source: Mitre, NVD

Published: 2013-12-22

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.03599