CVE-2013-0542 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2013-0542

Deferred

More Info Official Page

Source-psirt@us.ibm.com

Published At-24 Apr, 2013 | 10:28

Updated At-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 allows remote attackers to inject arbitrary web script or HTML via crafted field values.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

IBM Corporation

>>websphere_application_server>>Versions up to 6.1.0.45(inclusive)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.1

cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.2

cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.3

cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.5

cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.7

cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.9

cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.11

cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.12

cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.13

cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.14

cpe:2.3:a:ibm:websphere_application_server:6.1.0.14:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.15

cpe:2.3:a:ibm:websphere_application_server:6.1.0.15:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.17

cpe:2.3:a:ibm:websphere_application_server:6.1.0.17:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.19

cpe:2.3:a:ibm:websphere_application_server:6.1.0.19:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.21

cpe:2.3:a:ibm:websphere_application_server:6.1.0.21:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.23

cpe:2.3:a:ibm:websphere_application_server:6.1.0.23:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.25

cpe:2.3:a:ibm:websphere_application_server:6.1.0.25:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.27

cpe:2.3:a:ibm:websphere_application_server:6.1.0.27:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.29

cpe:2.3:a:ibm:websphere_application_server:6.1.0.29:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.31

cpe:2.3:a:ibm:websphere_application_server:6.1.0.31:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.33

cpe:2.3:a:ibm:websphere_application_server:6.1.0.33:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.35

cpe:2.3:a:ibm:websphere_application_server:6.1.0.35:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.37

cpe:2.3:a:ibm:websphere_application_server:6.1.0.37:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.39

cpe:2.3:a:ibm:websphere_application_server:6.1.0.39:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.41

cpe:2.3:a:ibm:websphere_application_server:6.1.0.41:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>6.1.0.43

cpe:2.3:a:ibm:websphere_application_server:6.1.0.43:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.1

cpe:2.3:a:ibm:websphere_application_server:7.0.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.2

cpe:2.3:a:ibm:websphere_application_server:7.0.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.3

cpe:2.3:a:ibm:websphere_application_server:7.0.0.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.4

cpe:2.3:a:ibm:websphere_application_server:7.0.0.4:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.5

cpe:2.3:a:ibm:websphere_application_server:7.0.0.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.6

cpe:2.3:a:ibm:websphere_application_server:7.0.0.6:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.7

cpe:2.3:a:ibm:websphere_application_server:7.0.0.7:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.8

cpe:2.3:a:ibm:websphere_application_server:7.0.0.8:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.9

cpe:2.3:a:ibm:websphere_application_server:7.0.0.9:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.11

cpe:2.3:a:ibm:websphere_application_server:7.0.0.11:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.13

cpe:2.3:a:ibm:websphere_application_server:7.0.0.13:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.15

cpe:2.3:a:ibm:websphere_application_server:7.0.0.15:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.17

cpe:2.3:a:ibm:websphere_application_server:7.0.0.17:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.19

cpe:2.3:a:ibm:websphere_application_server:7.0.0.19:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.21

cpe:2.3:a:ibm:websphere_application_server:7.0.0.21:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.23

cpe:2.3:a:ibm:websphere_application_server:7.0.0.23:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.25

cpe:2.3:a:ibm:websphere_application_server:7.0.0.25:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>7.0.0.27

cpe:2.3:a:ibm:websphere_application_server:7.0.0.27:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>8.0.0.0

cpe:2.3:a:ibm:websphere_application_server:8.0.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>8.0.0.1

cpe:2.3:a:ibm:websphere_application_server:8.0.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>8.0.0.2

cpe:2.3:a:ibm:websphere_application_server:8.0.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_application_server>>8.0.0.3

cpe:2.3:a:ibm:websphere_application_server:8.0.0.3:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?&uid=swg21632423	psirt@us.ibm.com	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM81846	psirt@us.ibm.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/82697	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?&uid=swg21632423	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PM81846	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/82697	af854a3a-2127-422b-91ae-364da2661108	N/A