CVE-2013-6735

IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

3.60% chance of exploitation in the next 30 days, 89th percentile

Published

2013-12-22

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/124611/IBM-Web-Content-Manager-XPath-Injection.html

References

• CVE Record
• NVD entry

Related

• CVE-2013-6720
• CVE-2013-6765
• CVE-2013-6719
• CVE-2013-6767
• CVE-2013-6674
• CVE-2013-6785