Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 01:54
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093491 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/85274 - |
Information
Published : 2013-08-16 01:55
Updated : 2024-11-21 01:54
NVD link : CVE-2013-4007
Mitre link : CVE-2013-4007
CVE.ORG link : CVE-2013-4007
JSON object : View
Products Affected
ibm
- bladecenter
- advanced_management_module
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')