CVE-2013-4007

Summary

CVE	CVE-2013-4007
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2013-08-16 01:55:00 UTC
Updated	2017-08-29 01:33:00 UTC
Description	Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Risk And Classification

Problem Types: CWE-79

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Ibm	Advanced Management Module	1.00	All	All	All
Hardware	Ibm	Advanced Management Module	1.01	All	All	All
Hardware	Ibm	Advanced Management Module	1.20	All	All	All
Hardware	Ibm	Advanced Management Module	1.20	f	All	All
Hardware	Ibm	Advanced Management Module	1.25	All	All	All
Hardware	Ibm	Advanced Management Module	1.25	e	All	All
Hardware	Ibm	Advanced Management Module	1.25	i	All	All
Hardware	Ibm	Advanced Management Module	1.26	b	All	All
Hardware	Ibm	Advanced Management Module	1.26	e	All	All
Hardware	Ibm	Advanced Management Module	1.26	h	All	All
Hardware	Ibm	Advanced Management Module	1.26	i	All	All
Hardware	Ibm	Advanced Management Module	1.26	k	All	All
Hardware	Ibm	Advanced Management Module	1.28	g	All	All
Hardware	Ibm	Advanced Management Module	1.32	d	All	All
Hardware	Ibm	Advanced Management Module	1.34	b	All	All
Hardware	Ibm	Advanced Management Module	1.34	e	All	All
Hardware	Ibm	Advanced Management Module	1.36	d	All	All
Hardware	Ibm	Advanced Management Module	1.36	g	All	All
Hardware	Ibm	Advanced Management Module	1.36	h	All	All
Hardware	Ibm	Advanced Management Module	1.36	k	All	All
Hardware	Ibm	Advanced Management Module	1.42	d	All	All
Hardware	Ibm	Advanced Management Module	1.42	f	All	All
Hardware	Ibm	Advanced Management Module	1.42	i	All	All
Hardware	Ibm	Advanced Management Module	1.42	n	All	All
Hardware	Ibm	Advanced Management Module	1.42	o	All	All
Hardware	Ibm	Advanced Management Module	1.42	t	All	All
Hardware	Ibm	Advanced Management Module	2.46	c	All	All
Hardware	Ibm	Advanced Management Module	2.46	j	All	All
Hardware	Ibm	Advanced Management Module	2.48	c	All	All
Hardware	Ibm	Advanced Management Module	2.48	d	All	All
Hardware	Ibm	Advanced Management Module	2.48	g	All	All
Hardware	Ibm	Advanced Management Module	2.48	n	All	All
Hardware	Ibm	Advanced Management Module	2.50	c	All	All
Hardware	Ibm	Advanced Management Module	2.50	g	All	All
Hardware	Ibm	Advanced Management Module	2.50	k	All	All
Hardware	Ibm	Advanced Management Module	2.50	p	All	All
Hardware	Ibm	Advanced Management Module	3.54	d	All	All
Hardware	Ibm	Advanced Management Module	1.00	All	All	All
Hardware	Ibm	Advanced Management Module	1.01	All	All	All
Hardware	Ibm	Advanced Management Module	1.20	All	All	All
Hardware	Ibm	Advanced Management Module	1.20	f	All	All
Hardware	Ibm	Advanced Management Module	1.25	All	All	All
Hardware	Ibm	Advanced Management Module	1.25	e	All	All
Hardware	Ibm	Advanced Management Module	1.25	i	All	All
Hardware	Ibm	Advanced Management Module	1.26	b	All	All
Hardware	Ibm	Advanced Management Module	1.26	e	All	All
Hardware	Ibm	Advanced Management Module	1.26	h	All	All
Hardware	Ibm	Advanced Management Module	1.26	i	All	All
Hardware	Ibm	Advanced Management Module	1.26	k	All	All
Hardware	Ibm	Advanced Management Module	1.28	g	All	All
Hardware	Ibm	Advanced Management Module	1.32	d	All	All
Hardware	Ibm	Advanced Management Module	1.34	b	All	All
Hardware	Ibm	Advanced Management Module	1.34	e	All	All
Hardware	Ibm	Advanced Management Module	1.36	d	All	All
Hardware	Ibm	Advanced Management Module	1.36	g	All	All
Hardware	Ibm	Advanced Management Module	1.36	h	All	All
Hardware	Ibm	Advanced Management Module	1.36	k	All	All
Hardware	Ibm	Advanced Management Module	1.42	d	All	All
Hardware	Ibm	Advanced Management Module	1.42	f	All	All
Hardware	Ibm	Advanced Management Module	1.42	i	All	All
Hardware	Ibm	Advanced Management Module	1.42	n	All	All
Hardware	Ibm	Advanced Management Module	1.42	o	All	All
Hardware	Ibm	Advanced Management Module	1.42	t	All	All
Hardware	Ibm	Advanced Management Module	2.46	c	All	All
Hardware	Ibm	Advanced Management Module	2.46	j	All	All
Hardware	Ibm	Advanced Management Module	2.48	c	All	All
Hardware	Ibm	Advanced Management Module	2.48	d	All	All
Hardware	Ibm	Advanced Management Module	2.48	g	All	All
Hardware	Ibm	Advanced Management Module	2.48	n	All	All
Hardware	Ibm	Advanced Management Module	2.50	c	All	All
Hardware	Ibm	Advanced Management Module	2.50	g	All	All
Hardware	Ibm	Advanced Management Module	2.50	k	All	All
Hardware	Ibm	Advanced Management Module	2.50	p	All	All
Hardware	Ibm	Advanced Management Module	3.54	d	All	All
Hardware	Ibm	Advanced Management Module	All	l	All	All
Hardware	Ibm	Advanced Management Module	All	g	All	All
Hardware	Ibm	Bladecenter	hs22	All	All	All
Hardware	Ibm	Bladecenter	hs22v	All	All	All
Hardware	Ibm	Bladecenter	hs23	All	All	All
Hardware	Ibm	Bladecenter	hs23e	All	All	All
Hardware	Ibm	Bladecenter	hx5	All	All	All
Hardware	Ibm	Bladecenter	hs22	All	All	All
Hardware	Ibm	Bladecenter	hs22v	All	All	All
Hardware	Ibm	Bladecenter	hs23	All	All	All
Hardware	Ibm	Bladecenter	hs23e	All	All	All
Hardware	Ibm	Bladecenter	hx5	All	All	All

References

Reference	Source	Link	Tags
IBM Support	CONFIRM	www.ibm.com	Vendor Advisory
IBM X-Force Exchange	XF	exchange.xforce.ibmcloud.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.