Cross-Site Scripting Vulnerability in IBM Security Access Manager
CVE-2013-6745

Currently unrated

Key Information:

Vendor: IBM
Status: Security Access Manager For Enterprise Single Sign-on
Vendor: CVE Published:; 22 December 2013

What is CVE-2013-6745?

A cross-site scripting vulnerability exists in the IMS server used by IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) versions prior to Ifix 6. This flaw enables remote authenticated users to exploit the system by injecting arbitrary web scripts or HTML through specially crafted inputs to specific dynamic web forms. This can potentially allow an attacker to manipulate user sessions, steal sensitive data, and perform other malicious actions within affected environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch