{"id":"CVE-2013-3034","aliases":["EUVD-2013-2973","GHSA-m9rr-495w-r5xp"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8...","description":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.","severity":{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00936,"percentile":0.61034,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2013-08-16T01:00:00Z","modified":"2026-06-16T23:54:23Z","products":[{"vendor":"ibm","product":"infosphere_information_server"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21646136","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/61757","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84646","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3034"},{"url":"https://github.com/advisories/GHSA-m9rr-495w-r5xp"}],"sources":{"cve":[{"id":"CVE-2013-3034","description":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.","status":"published","published":"2013-08-16T01:00:00Z","modified":"2024-08-06T16:00:10.002Z","updated_at":"2026-11-02T14:34:56.530545Z"}],"euvd":[{"id":"EUVD-2013-2973","description":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.","status":"published","published":"2013-08-16T01:00:00Z","modified":"2024-08-06T16:00:10Z","updated_at":"2026-11-03T01:56:36.190633Z"}],"ghsa":[{"id":"GHSA-m9rr-495w-r5xp","title":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8...","description":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.","status":"published","published":"2022-05-17T01:35:31Z","modified":"2023-02-03T05:04:46Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:53:37.258179Z"}],"nvd":[{"id":"CVE-2013-3034","description":"Cross-site scripting (XSS) vulnerability in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the web console.","status":"published","published":"2013-08-16T01:55:15.777Z","modified":"2026-06-16T23:54:23.847Z","cvss":[{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:02:31.592595Z"}]}}