CVE-2013-6746: IBM Filenet Case Foundation

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• IBM Filenet Case Foundation: version 5.2.0 only
• IBM Filenet Content Manager: version 4.5.0 only; version 4.5.1 only; version 5.0.0 only; version 5.1.0 only; version 5.2.0 only
• IBM Filenet p8 Business Process Manager: version 4.5.1 only; version 5.0.0 only; version 5.1.0 only

Published 2014-01-22. Last modified 2026-06-17.