CVE-2013-0464

CVE-2013-0464

EPSS 1.8%

Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/54971 http://secunia.com/advisories/55115 https://exchange.xforce.ibmcloud.com/vulnerabilities/81060 http://www-01.ibm.com/support/docview.wss?uid=swg21637954 http://www.securityfocus.com/bid/60246