Vulnerability record · CVE-2013-0473 · published 29 March 2013

CVE-2013-0473: Ibm security appscan cross-site scripting vulnerability

Ibm · Security Appscan

Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allow remote attackers to inject arbitrary web script or HTML via a crafted report.

4.3 CVSS 2.0 Medium EPSS 1.1% · top 34.5% CWE-79 · Cross-site scripting

4.3CVSS 2.0 base score

1.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

6References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Rational Policy Tester Ibm

Security Appscan Ibm

References

Link	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21626264	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337
http://www-01.ibm.com/support/docview.wss?uid=swg21626264	Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21631304	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/81337

Track CVE-2013-0473 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2014-6119Ibm security appscan code injection vulnerabilityIBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.…EPSS 3.6%23 Dec 2014 8.1CVE-2016-9981Ibm security appscan vulnerabilityIBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session. IBM X-Force I…EPSS 1.4%2 Aug 2017 7.6CVE-2014-0904Ibm security appscan improper input validation vulnerabilityThe update process in IBM Security AppScan Standard 7.9 through 8.8 does not require integrity checks of downloaded files, which allows remote attack…EPSS 3.1%26 Mar 2014 7.3CVE-2016-6042Ibm security appscan memory buffer overflow vulnerabilityIBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memor…EPSS 2.6%1 Feb 2017 7.2CVE-2013-0513Ibm security appscan vulnerabilityIBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " (doubl…EPSS 0.33%29 Mar 2013 6.8CVE-2013-4062Ibm rational policy tester vulnerabilityIBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof …EPSS 0.58%9 Sep 2013 6.8CVE-2013-0532Ibm security appscan cross-site request forgery vulnerabilityCross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x …EPSS 0.63%29 Mar 2013 6.5CVE-2016-0288Ibm security appscan vulnerabilityIBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary…EPSS 1.5%1 Jun 2016

Source: NIST National Vulnerability Database (record CVE-2013-0473), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.