CVE-2013-0464

Publication date 3 June 2013

Last updated 24 July 2024


Ubuntu priority

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Eclipse Help System (IEHS) 3.4.3 and 3.6.2, as used in IBM SPSS Data Collection 6.0, 6.0.1, and 7.0, allow remote attackers to inject arbitrary web script or HTML via a crafted URL.

Read the notes from the security team

Status

Package Ubuntu Release Status
eclipse 25.10 questing Not in release
25.04 plucky Not in release
24.10 oracular Not in release
24.04 LTS noble Not in release
23.10 mantic Not in release
23.04 lunar Not in release
22.10 kinetic Not in release
22.04 LTS jammy Not in release
21.10 impish Not in release
21.04 hirsute Not in release
20.10 groovy Not in release
20.04 LTS focal Not in release
19.10 eoan Not in release
19.04 disco Not in release
18.10 cosmic Ignored end of life
18.04 LTS bionic
Vulnerable, fix deferred
17.10 artful Ignored end of life
17.04 zesty Ignored end of life
16.10 yakkety Ignored end of life
16.04 LTS xenial
Vulnerable, fix deferred
15.10 wily Ignored end of life
15.04 vivid Ignored end of life, was deferred
14.10 utopic Ignored end of life, was deferred
14.04 LTS trusty Not in release
13.10 saucy Ignored end of life, was deferred
13.04 raring Ignored end of life, was deferred
12.10 quantal Ignored end of life, was deferred
12.04 LTS precise Ignored end of life
10.04 LTS lucid Ignored end of life, was deferred

Notes


seth-arnold

I'm not confident this vulnerability affects our package; further investigation is needed.


Access our resources on patching vulnerabilities