CVE-2013-5378

LowCVSS 3.5/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.

Metrics

CVSS 2.0 3.5/10AV:N/AC:M/Au:S/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PM95802Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM95881Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21655634Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86929
http://www-01.ibm.com/support/docview.wss?uid=swg1PM95802Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM95881Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM97593Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21655634Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/86929

Timeline

Published: Nov 13, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-53793.5Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authentica CVE-2013-53802.1IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive informatio CVE-2013-53816.5IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to gain privil CVE-2013-53824.0IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privile CVE-2013-53834.0IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privile CVE-2013-53858.5The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System (aka NOS, formerly BLADE Operat CVE-2013-53874.3Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) vi CVE-2013-53884.3Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject a CVE-2013-53894.3Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject a CVE-2013-53903.5Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remo CVE-2013-53915.3IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consum CVE-2013-53937.5The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has uns