RCE in Ibm Marketing Platform

CVE-2013-6309

IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an unspecified link injection.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Marketing_platform — versions 9.1.0.0, 9.1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vdb-entry, x_refsource_XF)