Back to Database
Status published
Medium
CVE-2013-4946
Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express...
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in BMC Service Desk Express (SDE) 10.2.1.95 allow remote attackers to inject arbitrary web script or HTML via the (1) SelTab parameter to QV_admin.aspx, the (2) CallBack parameter to QV_grid.aspx, or the (3) HelpPage parameter to commonhelp.aspx.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4946
Credits & Attribution
No credits recorded in the NVD database.
References
More from bmc
View All →CVE-2022-26088
An issue was discovered in BMC Remedy before 22.1. Email-based...
Unknown
0
CVE-2020-35593
BMC PATROL Agent through 20.08.00 allows local privilege escalation via...
High
7.8
CVE-2019-8352
By default, BMC PATROL Agent through 11.3.01 uses a static...
Critical
9.8
CVE-2019-17044
An issue was discovered in BMC Patrol Agent 9.0.10i. Weak...
High
7.8
CVE-2019-17043
An issue was discovered in BMC Patrol Agent 9.0.10i. Weak...
High
7.8
Affected Vendor
Affected Software
service desk express
Vulnerable Versions:
10.2.1.95
Timeline
Official Publish:
July 29th, 2013
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.