CVE-2013-5376

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-17 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.

Affected products

IBM Storwize V7000 Unified: all versions
IBM Storwize V7000 Unified Software: 1.3.0.0, 1.3.2.0, 1.3.2.3, 1.4.0.0, 1.4.0.4, 1.4.1.0 (+1)

References

http://www.ibm.com/support/docview.wss?uid=ssg1S1004452
https://exchange.xforce.ibmcloud.com/vulnerabilities/86902
http://www.ibm.com/support/docview.wss?uid=ssg1S1004452
https://exchange.xforce.ibmcloud.com/vulnerabilities/86902

Get alerted when CVE-2013-5376 or the next vulnerability affects your stack