Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2013-0499 Details
Description
Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTML via a SOAP message, as demonstrated by the XML Firewall, Multi Protocol Gateway (MPGW), Web Service Proxy, and Web Token services.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ibm websphere datapower xc10 appliance firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower xc10 appliance | All versions |
CPE
Remediation
| |
| ibm websphere datapower service gateway xg45 virtual edition firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower service gateway xg45 virtual edition | All versions |
CPE
Remediation
| |
| ibm websphere datapower service gateway xg45 firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower service gateway xg45 | All versions |
CPE
Remediation
| |
| ibm websphere datapower integration appliance xi52 virtual edition firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower integration appliance xi52 virtual edition | All versions |
CPE
Remediation
| |
| ibm websphere datapower integration appliance xi52 firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower integration appliance xi52 | All versions |
CPE
Remediation
| |
| ibm websphere datapower integration appliance xi50 firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower integration appliance xi50 | All versions |
CPE
Remediation
| |
| ibm websphere datapower b2b appliance xb62 firmware | 3.8.2 4.0 4.0.1 4.0.2 5.0.0 |
CPE
Remediation
| |
| ibm websphere datapower b2b appliance xb62 | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 29, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Aug 29, 2017 | CVE Modified | [email protected] |
| May 29, 2013 | Initial Analysis | [email protected] |