CVE ID: CVE-2013-6745 Description: The vulnerability is a Cross-Site Scripting (XSS) in the dynamic web form of IBM Security Access Manager for Enterprise Single Sign-on, version 8.2. A remote attacker could exploit this vulnerability to inject malicious script into the application. CVSS Scores: - Base Score: 3.5 - Temporal Score: Refer to https://exchange.xforce.ibmcloud.com/vulnerabilities/89861 - Environmental Score: Undefined Affected Products and Versions: IBM Security Access Manager for Enterprise Single Sign-on 8.2 Remediation: Download ISAM ESSO IMS I-Fix 6 Workaround: None Mitigation: None References: - Complete CVSS Guide - On-line Calculator V2 - CVE-2013-6745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89861 - IBM Security Alerts Related Information: IBM Secure Engineering Web Portal