CVE-2013-6725

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

Cross-site scripting (XSS) vulnerability in the Administrative Console in IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.

Metrics

CVSS 2.0 3.5/10AV:N/AC:M/Au:S/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/102119
http://www-01.ibm.com/support/docview.wss?uid=swg1PM98132Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21661323Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21661325Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21669554Vendor Advisory
http://www.securityfocus.com/bid/65099
https://exchange.xforce.ibmcloud.com/vulnerabilities/89280
http://osvdb.org/102119
http://www-01.ibm.com/support/docview.wss?uid=swg1PM98132Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21661323Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21661325Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21669554Vendor Advisory
http://www.securityfocus.com/bid/65099
https://exchange.xforce.ibmcloud.com/vulnerabilities/89280

Timeline

Published: Jan 16, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-67263.5Multiple cross-site scripting (XSS) vulnerabilities in WebProcess.srv in IBM TRIRIGA Application Platform 3.2.x and 3.3.x before 3.3.1.2 all CVE-2013-67275.0The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows r CVE-2013-67285.8The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by l CVE-2013-67293.5Cross-site scripting (XSS) vulnerability in IBM QuickFile 1.0.0.0 before iFix 4 and 1.1.0.1 before iFix 3 allows remote authenticated users CVE-2013-67304.3IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x before 7.0.0.2 CF27, and 8.0.0.x before 8.0.0.1 CF1 CVE-2013-67314.0IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an HTTP POST request.CVE-2013-67324.3Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1 before IF6, 10.1.1 before IF5, 1 CVE-2013-67334.3Cross-site scripting (XSS) vulnerability in the Web Application in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allows CVE-2013-67343.5IBM WebSphere eXtreme Scale Client 7.1 through 8.6.0.4 does not properly isolate the cached data of different users, which allows remote aut CVE-2013-67355.0IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x t CVE-2013-67374.0IBM System Storage Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.3.0 does not properly restrict the content of a dump file upon encounte CVE-2013-67384.3Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote