{"id":"CVE-2013-4057","aliases":["EUVD-2013-3988","GHSA-fqwv-r262-9xm8"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information...","description":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00695,"percentile":0.53246,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2014-03-16T10:00:00Z","modified":"2026-06-16T23:56:33Z","products":[{"vendor":"ibm","product":"infosphere_information_server"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR49200","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.securityfocus.com/bid/66154","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR48815","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1JR49206","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21666684","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/86546","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4057"},{"url":"https://github.com/advisories/GHSA-fqwv-r262-9xm8"}],"sources":{"cve":[{"id":"CVE-2013-4057","description":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2014-03-16T10:00:00Z","modified":"2024-08-06T16:30:49.966Z","updated_at":"2026-11-02T14:34:58.193873Z"}],"euvd":[{"id":"EUVD-2013-3988","description":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2014-03-16T10:00:00Z","modified":"2024-08-06T16:30:49Z","updated_at":"2026-11-03T01:56:33.227006Z"}],"ghsa":[{"id":"GHSA-fqwv-r262-9xm8","title":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information...","description":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2022-05-17T01:33:28Z","modified":"2023-02-03T05:04:25Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:53:32.764591Z"}],"nvd":[{"id":"CVE-2013-4057","description":"Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.","status":"published","published":"2014-03-16T14:06:44.6Z","modified":"2026-06-16T23:56:33.04Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:50.049023Z"}]}}