« Volver al listado

CVE-2013-0572

Estado: ModificadaBaja (2.3)—

Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

IBM — Application Support FacilityIBM — Document Connect FOR Application Support Facility

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-0572",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 4.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-04-27T03:16:46.863",
  "references": [
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21635328",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83247",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21635328",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/83247",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in IBM Document Connect for Application Support Facility (aka DC4ASF) before 1.0.0.1218 in Application Support Facility (ASF) 3.4 for z/OS on Windows, Linux, and AIX allows remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecución de código en sitios cruzados (XSS) en IBM Document Connect para Application Support Facility (tambíen conocido como DC4ASF) anteriores a v1.0.0.1218 en Application Support Facility (ASF) v3.4 para  z/OS en Windows, Linux y AIX permite a usuarios autenticados remotos a inyectar contenido y conducir ataques de phising, a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:49:41.290",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:aix:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7623E17C-E016-4C34-BFF5-835FFCF84B9A"
            },
            {
              "criteria": "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:linux_kernel:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1935A724-42B2-43B2-92B9-34618235CBDE"
            },
            {
              "criteria": "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65997783-AC40-4E4B-A539-DCE3C4768741"
            },
            {
              "criteria": "cpe:2.3:a:ibm:application_support_facility:3.4.0:-:*:*:*:z\\/os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB26C6CF-F463-4C1D-B108-A5BA788F03BD"
            },
            {
              "criteria": "cpe:2.3:a:ibm:document_connect_for_application_support_facility:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CA8AEA0-9FEC-4008-8E8F-8BC425ACFDD2",
              "versionEndIncluding": "1.0.0.1204"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com"
}