{"id":"CVE-2013-0544","aliases":["EUVD-2013-0555","GHSA-63h9-j7qx-8xx4"],"status":"published","title":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application...","description":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03147,"percentile":0.8802,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2013-04-24T10:00:00Z","modified":"2026-06-16T23:49:39Z","products":[{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?\u0026uid=swg21632423","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM82468","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82760","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0544"},{"url":"https://github.com/advisories/GHSA-63h9-j7qx-8xx4"}],"sources":{"cve":[{"id":"CVE-2013-0544","description":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.","status":"published","published":"2013-04-24T10:00:00Z","modified":"2024-08-06T14:33:05.281Z","updated_at":"2026-11-02T14:34:59.222149Z"}],"euvd":[{"id":"EUVD-2013-0555","description":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.","status":"published","published":"2013-04-24T10:00:00Z","modified":"2024-08-06T14:33:05Z","updated_at":"2026-11-03T01:56:44.745992Z"}],"ghsa":[{"id":"GHSA-63h9-j7qx-8xx4","title":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application...","description":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.","status":"published","published":"2022-05-05T02:49:16Z","modified":"2023-02-01T05:02:06Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:49:50.516173Z"}],"nvd":[{"id":"CVE-2013-0544","description":"Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux and UNIX allows remote authenticated users to modify data via unspecified vectors.","status":"published","published":"2013-04-24T10:28:37.57Z","modified":"2026-06-16T23:49:39.62Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:02:25.704053Z"}]}}