{"id":"CVE-2013-5454","aliases":["EUVD-2013-5294","GHSA-6627-4m3v-x6v4"],"status":"published","title":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27,...","description":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01803,"percentile":0.7868,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2013-11-16T02:00:00Z","modified":"2026-06-16T23:58:50Z","products":[{"vendor":"ibm","product":"websphere_portal"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM99205","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21655656","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/88253","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5454"},{"url":"https://github.com/advisories/GHSA-6627-4m3v-x6v4"}],"sources":{"cve":[{"id":"CVE-2013-5454","description":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.","status":"published","published":"2013-11-16T02:00:00Z","modified":"2024-08-06T17:15:20.122Z","updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-5294","description":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.","status":"published","published":"2013-11-16T02:00:00Z","modified":"2024-08-06T17:15:20Z","updated_at":"2026-11-03T01:56:29.132438Z"}],"ghsa":[{"id":"GHSA-6627-4m3v-x6v4","title":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27,...","description":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.","status":"published","published":"2022-05-17T01:31:43Z","modified":"2023-02-03T05:04:36Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:35.259064Z"}],"nvd":[{"id":"CVE-2013-5454","description":"IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.","status":"published","published":"2013-11-18T03:55:06.007Z","modified":"2026-06-16T23:58:50.6Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:40.988689Z"}]}}