{"id":"CVE-2013-2630","aliases":["EUVD-2013-2569","GHSA-g7xp-cxj3-842g"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows...","description":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00942,"percentile":0.61244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2013-07-31T10:00:00Z","modified":"2026-06-16T23:53:44Z","products":[{"vendor":"broadcom","product":"service_desk_manager"}],"references":[{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B8C50A6C7-8633-45A8-A0A6-3D454437AD53%7D","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2630"},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={8C50A6C7-8633-45A8-A0A6-3D454437AD53}"},{"url":"https://github.com/advisories/GHSA-g7xp-cxj3-842g"}],"sources":{"cve":[{"id":"CVE-2013-2630","description":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.","status":"published","published":"2013-07-31T10:00:00Z","modified":"2024-09-17T03:07:28.75Z","updated_at":"2026-11-02T14:34:56.530545Z"}],"euvd":[{"id":"EUVD-2013-2569","description":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.","status":"published","published":"2013-07-31T10:00:00Z","modified":"2024-09-17T03:07:28Z","updated_at":"2026-11-03T00:28:34.673232Z"}],"ghsa":[{"id":"GHSA-g7xp-cxj3-842g","title":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows...","description":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.","status":"published","published":"2022-05-13T01:10:55Z","modified":"2025-04-11T04:12:31Z","cwes":["CWE-79"],"updated_at":"2026-11-02T15:01:14.028836Z"}],"nvd":[{"id":"CVE-2013-2630","description":"Cross-site scripting (XSS) vulnerability in CA Service Desk Manager 12.5 through 12.7 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.","status":"published","published":"2013-07-31T13:20:27.62Z","modified":"2026-06-16T23:53:44.283Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:31.592595Z"}]}}