XSS in IBM Application Support Facility
CVE-2013-0571
Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.007 (48.4th percentile) — read the EPSS interpretation.
Affected products
- Ibm Application_support_facility — versions 3.4.0
- Ibm Document_connect_for_application_support_facility
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)