CVE-2013-5425: IBM WebSphere Virtual Enterprise

Low severity, CVSS 3.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected products

• IBM WebSphere Virtual Enterprise: version 6.1 only; version 6.1.1 only; version 6.1.1.1 only; version 6.1.1.2 only; version 6.1.1.3 only; version 6.1.1.4 only; …

Published 2013-11-18. Last modified 2026-06-16.