XSS in Ibm Sterling_control_center
CVE-2013-2969
Cross-site scripting (XSS) vulnerability in IBM Sterling Control Center (SCC) 5.2 before 5.2.0.9, 5.3 before 5.3.0.4, and 5.4 through 5.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving in…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.008 (51.2th percentile) — read the EPSS interpretation.
Affected products
- Ibm Sterling_control_center — versions 5.2.0, 5.3.0, 5.3.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)