// For flags

CVE-2013-0499

 

Severity Score

4.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services.

Una vulnerabilidad de tipo cross-site scripting (XSS) en la funcionalidad echo en dispositivos SOA WebSphere DataPower de IBM con la versiĆ³n de firmware 3.8.2, 4.0, 4.0.1, 4.0.2 y 5.0.0, permite a los atacantes remotos inyectar script web o HTML arbitrarios por medio de un mensaje SOAP, como es demostrado por los servicios Firewall XML, Multi Protocol Gateway (MPGW), Proxy de servicio web y Token web.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2012-12-16 CVE Reserved
  • 2013-05-23 CVE Published
  • 2023-07-15 EPSS Updated
  • 2024-08-06 CVE Updated
  • 2024-08-06 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance Firmware
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance Firmware
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance Firmware
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance Firmware
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance Firmware
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Xc10 Appliance
Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45 Firmware
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Service Gateway Xg45
Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Virtual Edition
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi52
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50 Firmware
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower Integration Appliance Xi50
Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62 Firmware
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware"
3.8.2
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "3.8.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62 Firmware
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware"
4.0
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "4.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62 Firmware
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware"
4.0.1
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "4.0.1"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62 Firmware
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware"
4.0.2
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "4.0.2"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62"
--
Affected
Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62 Firmware
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware"
5.0.0
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "5.0.0"
-
Affected
in Ibm
Search vendor "Ibm"
Websphere Datapower B2b Appliance Xb62
Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62"
--
Affected