VIR Vulnerability Intelligence Relay

CVE-2013-2957

low
Published 2013-05-27 · Modified 2026-04-29
CVSS v3
—
CVSS v2
3.5
VIR risk
3.5

Description

Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21637444

Application impact
VendorProductVersionsFixed
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.0
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.3.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.3.2
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.3.3
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.4.0
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.4.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.5.0
ibminfosphere_optim_data_growth_for_oracle_e-business_suite6.5.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.1.0
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.1.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.1.2
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.2.0
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.2.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.2.2
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.3.0
ibminfosphere_optim_data_growth_for_oracle_e-business_suite7.3.1
ibminfosphere_optim_data_growth_for_oracle_e-business_suite9.1.0

References

CWEs

CWE-79

Verify integrity in audit chain (admin only). AS-IS.