CVE-2013-0473

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-29 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report.

Affected products

IBM Rational Policy Tester: 5.6.0.0, 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.1.0, 8.0.1.1 (+4)
IBM Corporation AppScan Enterprise: 5.6.0.0, 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.1.0, 8.0.1.1 (+6)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21626264
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337
http://www-01.ibm.com/support/docview.wss?uid=swg21626264
http://www-01.ibm.com/support/docview.wss?uid=swg21631304
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337

Get alerted when CVE-2013-0473 or the next vulnerability affects your stack