{"api_version":"1","generated_at":"2026-07-23T08:11:00+00:00","cve":"CVE-2013-6237","urls":{"html":"https://cve.report/CVE-2013-6237","api":"https://cve.report/api/cve/CVE-2013-6237.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2013-6237","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-6237"},"summary":{"title":"CVE-2013-6237","description":"The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.","state":"PUBLISHED","assigner":"mitre","published_at":"2013-12-10 16:55:25","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"3.5","severity":"","vector":"AV:N/AC:M/Au:S/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/bid/64050","name":"http://www.securityfocus.com/bid/64050","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Desktop Plugin For ISL Light Clipboard Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://osvdb.org/100512","name":"http://osvdb.org/100512","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89399","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89399","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm","name":"http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"ISL Online Releases Info","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://seclists.org/fulldisclosure/2013/Dec/14","name":"http://seclists.org/fulldisclosure/2013/Dec/14","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Full Disclosure:  [CVE-2013-6237] ISL Light - Desktop 3.5.4, Clipboard security issue","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html","name":"http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"ISL Light Desktop 3.5.4 Information Disclosure ≈ Packet Storm","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6237","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6237","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2013","cve_id":"6237","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"islonline","cpe5":"isl_desktop_plugin","cpe6":"1.3.3","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"windows","cpe11":"isl_light","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6237","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"islonline","cpe5":"isl_desktop_plugin","cpe6":"1.4.1","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"windows","cpe11":"isl_light","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6237","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"islonline","cpe5":"isl_desktop_plugin","cpe6":"1.4.2","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"windows","cpe11":"isl_light","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6237","vulnerable":"1","versionEndIncluding":"1.4.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"islonline","cpe5":"isl_desktop_plugin","cpe6":"*","cpe7":"-","cpe8":"-","cpe9":"*","cpe10":"windows","cpe11":"isl_light","cpe12":"*","cpe13":"*"},{"cve_year":"2013","cve_id":"6237","vulnerable":"1","versionEndIncluding":"3.5.4","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"islonline","cpe5":"isl_light","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2013","cve_id":"6237","cve":"CVE-2013-6237","epss":"0.004370000","percentile":"0.631330000","score_date":"2026-04-29","updated_at":"2026-04-30 00:13:22"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T17:38:58.974Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html"},{"name":"isllight-cve20136237-info-disc(89399)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89399"},{"name":"20131203 [CVE-2013-6237] ISL Light - Desktop 3.5.4, Clipboard security issue","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://seclists.org/fulldisclosure/2013/Dec/14"},{"name":"64050","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/64050"},{"name":"100512","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/100512"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2013-11-29T00:00:00.000Z","descriptions":[{"lang":"en","value":"The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html"},{"name":"isllight-cve20136237-info-disc(89399)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89399"},{"name":"20131203 [CVE-2013-6237] ISL Light - Desktop 3.5.4, Clipboard security issue","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://seclists.org/fulldisclosure/2013/Dec/14"},{"name":"64050","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/64050"},{"name":"100512","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/100512"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2013-6237","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html"},{"name":"isllight-cve20136237-info-disc(89399)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/89399"},{"name":"20131203 [CVE-2013-6237] ISL Light - Desktop 3.5.4, Clipboard security issue","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2013/Dec/14"},{"name":"64050","refsource":"BID","url":"http://www.securityfocus.com/bid/64050"},{"name":"100512","refsource":"OSVDB","url":"http://osvdb.org/100512"},{"name":"http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm","refsource":"CONFIRM","url":"http://www.islonline.com/help/isl-releases-info/any/manual/?2013-11-29-rel-info-isl-light-desktop-plugin-1-4-7-win.htm"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2013-6237","datePublished":"2013-12-10T15:00:00.000Z","dateReserved":"2013-10-22T00:00:00.000Z","dateUpdated":"2024-08-06T17:38:58.974Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2013-12-10 16:55:25","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:N/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:islonline:isl_desktop_plugin:*:-:-:*:windows:isl_light:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"534394C4-A6B4-4A9D-AE11-8C8251788388"},{"vulnerable":true,"criteria":"cpe:2.3:a:islonline:isl_desktop_plugin:1.3.3:-:-:*:windows:isl_light:*:*","matchCriteriaId":"78BD6401-7CAD-4483-BDE1-0DEBE373BA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:islonline:isl_desktop_plugin:1.4.1:-:-:*:windows:isl_light:*:*","matchCriteriaId":"B827413A-933C-4BC0-9360-2218CB131DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:islonline:isl_desktop_plugin:1.4.2:-:-:*:windows:isl_light:*:*","matchCriteriaId":"02E20552-3DC3-432F-9EE3-27296A19694B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:islonline:isl_light:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5.4","matchCriteriaId":"B27EBBA4-4E07-4FD2-B366-DF9FE2F10750"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2013","CveId":"6237","Ordinal":"1","Title":"CVE-2013-6237","CVE":"CVE-2013-6237","Year":"2013"},"notes":[{"CveYear":"2013","CveId":"6237","Ordinal":"1","NoteData":"The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.","Type":"Description","Title":"CVE-2013-6237"},{"CveYear":"2013","CveId":"6237","Ordinal":"2","NoteData":"2013-12-10","Type":"Other","Title":"Published"},{"CveYear":"2013","CveId":"6237","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}