CVE-2013-3501: Multiple cross-site scripting (XSS) vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote att...

Security readout for executives and security teams

CVE-2013-3501 describes multiple cross-site scripting flaws in GroundWork Monitor Enterprise 6.7.0. If an affected web interface is reachable, an attacker may be able to inject script or HTML into pages used by administrators or operators. Business urgency depends on whether this legacy monitoring platform is still deployed and exposed. Exposure is most likely in organizations still running GroundWork Monitor Enterprise 6.7.0 or bundled web components accessible to users, partners, VPN users, or the internet. If the product is retired or isolated from browsers used by privileged staff, practical exposure is lower. Treat as a legacy exposure check. Prioritize quickly if GroundWork 6.7.0 remains in use, especially if administrators access it through shared browsers or externally reachable networks. Mitigation focus: Confirm whether GroundWork Monitor Enterprise 6.7.0 is deployed.; Review GroundWork, SEC Consult, and CERT/CC guidance for fixed versions or vendor mitigations.; Restrict access to the GroundWork web interface to trusted networks and users..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.