VULNERABILITY INTELLIGENCE
CVE-2013-6735
CVSS score5 MEDIUM
EPSS probability3.60%
CISA KEVNot currently listed
Published2013-12-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x through 8.0.0.1 CF08 allows remote attackers to obtain sensitive Java Content Repository (JCR) information via a modified Web Content Manager (WCM) URL.
Primary references
- psirt@us.ibm.com
- psirt@us.ibm.com — Exploit, Third Party Advisory, VDB Entry
- psirt@us.ibm.com
- psirt@us.ibm.com — Not Applicable
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- psirt@us.ibm.com
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry