medium4.3
CVE-2013-0464
Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0,…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Eclipse Help System | Versions 3.4.3, 3.6.2 |
| Ibm | Spss Data Collection | Versions 6.0, 6.0.1, 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/54971
- http://secunia.com/advisories/55115
- http://www-01.ibm.com/support/docview.wss?uid=swg21637954
- http://www.securityfocus.com/bid/60246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81060
- http://secunia.com/advisories/54971
- http://secunia.com/advisories/55115
- http://www-01.ibm.com/support/docview.wss?uid=swg21637954
- http://www.securityfocus.com/bid/60246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81060