CVE-2013-6315

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-06 · updated 2026-06-17
Weakness: CWE-20

Description

IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 do not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

Affected products

IBM Enterprise Records: 5.1.1
IBM Infosphere Enterprise Records: 4.5.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21662911
https://exchange.xforce.ibmcloud.com/vulnerabilities/88596
http://www-01.ibm.com/support/docview.wss?uid=swg21662911
https://exchange.xforce.ibmcloud.com/vulnerabilities/88596

Get alerted when CVE-2013-6315 or the next vulnerability affects your stack