CVE-2013-6309

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-28 · updated 2026-06-17
Weakness: CWE-94

Description

IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an unspecified link injection.

Affected products

IBM Marketing Platform: 9.1.0.0, 9.1.0.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21676688
https://exchange.xforce.ibmcloud.com/vulnerabilities/88559
http://www-01.ibm.com/support/docview.wss?uid=swg21676688
https://exchange.xforce.ibmcloud.com/vulnerabilities/88559

Get alerted when CVE-2013-6309 or the next vulnerability affects your stack