CVE-2013-6327

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-17 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "cross-frame scripting" issue.

Affected products

IBM Sterling Connect Enterprise Http Option: 1.3.02, 1.4.00

References

http://www-01.ibm.com/support/docview.wss?uid=swg21659907
https://exchange.xforce.ibmcloud.com/vulnerabilities/88908
http://www-01.ibm.com/support/docview.wss?uid=swg21659907
https://exchange.xforce.ibmcloud.com/vulnerabilities/88908

Get alerted when CVE-2013-6327 or the next vulnerability affects your stack