CVE-2013-0499
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services.
Una vulnerabilidad de tipo cross-site scripting (XSS) en la funcionalidad echo en dispositivos SOA WebSphere DataPower de IBM con la versiĆ³n de firmware 3.8.2, 4.0, 4.0.1, 4.0.2 y 5.0.0, permite a los atacantes remotos inyectar script web o HTML arbitrarios por medio de un mensaje SOAP, como es demostrado por los servicios Firewall XML, Multi Protocol Gateway (MPGW), Proxy de servicio web y Token web.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2012-12-16 CVE Reserved
- 2013-05-23 CVE Published
- 2023-07-15 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/82221 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www-01.ibm.com/support/docview.wss?uid=swg21637717 | 2017-08-29 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Firmware Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Firmware Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Firmware Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Firmware Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Firmware Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Xc10 Appliance Search vendor "Ibm" for product "Websphere Datapower Xc10 Appliance" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Firmware Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45 Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Service Gateway Xg45 Search vendor "Ibm" for product "Websphere Datapower Service Gateway Xg45" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Virtual Edition Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Virtual Edition" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52 Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi52 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi52" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Firmware Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50 Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower Integration Appliance Xi50 Search vendor "Ibm" for product "Websphere Datapower Integration Appliance Xi50" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Firmware Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" | 3.8.2 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "3.8.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Firmware Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" | 4.0 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "4.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Firmware Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" | 4.0.1 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "4.0.1" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Firmware Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" | 4.0.2 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "4.0.2" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62" | - | - |
Affected
|
Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Firmware Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" | 5.0.0 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62 Firmware" and version "5.0.0" | - |
Affected
| in | Ibm Search vendor "Ibm" | Websphere Datapower B2b Appliance Xb62 Search vendor "Ibm" for product "Websphere Datapower B2b Appliance Xb62" | - | - |
Affected
|