CVE-2013-5442: Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Pr...

Security readout for executives and security teams

This issue affects the web-based Local Management Interface on IBM Security Network Protection XGS 5100 appliances. A remote attacker could inject script or HTML into that interface through unspecified vectors. Business urgency depends on whether affected firmware is still present and whether untrusted users can reach the management interface. Exposure is likely limited to organizations that still operate IBM XGS 5100 appliances on the affected 5.1 firmware branches. Risk increases if the LMI is reachable from broad internal networks, partner networks, VPN users, or the internet. Treat this as a targeted legacy-appliance cleanup item. It is not KEV-listed in the provided sources, but management-interface XSS can matter if administrators use affected devices and the interface is reachable by untrusted users. Mitigation focus: Upgrade affected 5.1 firmware to 5.1.0.6 or later, following IBM guidance.; Upgrade affected 5.1.1 firmware to 5.1.1.1 or later, following IBM guidance.; Restrict LMI access to authorized administrative networks only..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.