Vulnerability Description
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Algo One | 4.7.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21666110Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89024
- http://www-01.ibm.com/support/docview.wss?uid=swg21666110Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89024
FAQ
What is CVE-2013-6333?
CVE-2013-6333 is a vulnerability with a CVSS score of 3.5 (LOW). Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and AC...
How severe is CVE-2013-6333?
CVE-2013-6333 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-6333?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Algo One.