CVE-2013-6746

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-22 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

IBM Filenet Case Foundation: 5.2.0
IBM FileNet Content Manager: 4.5.0, 4.5.1, 5.0.0, 5.1.0, 5.2.0
IBM Filenet P8 Business Process Manager: 4.5.1, 5.0.0, 5.1.0

References

http://secunia.com/advisories/56500
http://www.ibm.com/support/docview.wss?uid=swg21662360
http://www.securityfocus.com/bid/65045
https://exchange.xforce.ibmcloud.com/vulnerabilities/89862
http://secunia.com/advisories/56500
http://www.ibm.com/support/docview.wss?uid=swg21662360
http://www.securityfocus.com/bid/65045
https://exchange.xforce.ibmcloud.com/vulnerabilities/89862

Get alerted when CVE-2013-6746 or the next vulnerability affects your stack