Cross-Site Scripting Vulnerability in IBM Security Access Manager
CVE-2013-6745

Currently unrated

Key Information:

Vendor
IBM
Status
Security Access Manager For Enterprise Single Sign-on
Vendor
CVE Published:
22 December 2013

Summary

A cross-site scripting vulnerability exists in the IMS server used by IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) versions prior to Ifix 6. This flaw enables remote authenticated users to exploit the system by injecting arbitrary web scripts or HTML through specially crafted inputs to specific dynamic web forms. This can potentially allow an attacker to manipulate user sessions, steal sensitive data, and perform other malicious actions within affected environments.

References

http://www.securityfocus.com/bid/64475
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21660569
x_refsource_CONFIRM
https://www-304.ibm.com/connections/blogs/PSIRT/entry/sec...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.