CVE-2013-6728

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-14 · updated 2026-06-17
Weakness: CWE-264

Description

The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory.

Affected products

IBM Websphere Dashboard Framework: 6.1.5, 7.0.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg1LO78265
http://www-01.ibm.com/support/docview.wss?uid=swg1LO78266
http://www-01.ibm.com/support/docview.wss?uid=swg21663022
https://exchange.xforce.ibmcloud.com/vulnerabilities/89283
http://www-01.ibm.com/support/docview.wss?uid=swg1LO78265
http://www-01.ibm.com/support/docview.wss?uid=swg1LO78266
http://www-01.ibm.com/support/docview.wss?uid=swg21663022
https://exchange.xforce.ibmcloud.com/vulnerabilities/89283

Get alerted when CVE-2013-6728 or the next vulnerability affects your stack