Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:algo_one:4.9.0:*:*:*:*:*:*:*

part: a version: 4.9.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAlgo One (ead2e46c-e184-5e6b-a21f-ddbe862880af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6333 vulnerable 2026-06-08 05:04:55.955716 Details available
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320.
Published: 2014-03-05T11:00:00.000Z
Updated: 2024-08-06T17:39:00.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6332 vulnerable 2026-06-08 05:04:55.955342 Details available
Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it.
Published: 2014-02-06T23:00:00.000Z
Updated: 2024-08-06T17:39:00.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6331 vulnerable 2026-06-08 05:04:55.954927 Details available
SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6302.
Published: 2014-03-05T11:00:00.000Z
Updated: 2024-08-06T17:39:01.169Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6320 vulnerable 2026-06-08 05:04:55.916520 Details available
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6333.
Published: 2014-03-05T11:00:00.000Z
Updated: 2024-08-06T17:39:01.103Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6319 vulnerable 2026-06-08 05:04:55.916157 Details available
IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to bypass intended access restrictions and read content via unspecified vectors.
Published: 2014-03-05T11:00:00.000Z
Updated: 2024-08-06T17:39:00.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6318 vulnerable 2026-06-08 05:04:55.915783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6303 vulnerable 2026-06-08 05:04:55.843279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6302 vulnerable 2026-06-08 05:04:55.842910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6301 vulnerable 2026-06-08 05:04:55.842541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6300 vulnerable 2026-06-08 05:04:55.842164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6299 vulnerable 2026-06-08 05:04:55.841761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5468 vulnerable 2026-06-08 05:04:51.784370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.