CVE-2013-4007

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-08-16 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

IBM Advanced Management Module: through 2.48; through 3.54; 1.00, 1.01, 1.20, 1.20-f, 1.25, 1.25-e (+31)

References

http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093491
https://exchange.xforce.ibmcloud.com/vulnerabilities/85274
http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5093491
https://exchange.xforce.ibmcloud.com/vulnerabilities/85274

Get alerted when CVE-2013-4007 or the next vulnerability affects your stack