CVE-2013-6309: IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequentl...

Security readout for executives and security teams

IBM Marketing Platform 9.1 before Fix Pack 2 had a session hijacking issue. An authenticated remote user could use an unspecified link injection weakness to take over sessions and then read or modify records or conduct transactions. Public details are limited, so urgency depends on whether the product and affected version are present. Exposure appears limited to organizations running IBM Marketing Platform 9.1 earlier than FP2. The attacker must be authenticated according to the CVE description. Internet-facing or broadly accessible deployments would carry higher business risk. Prioritize confirmation of exposure. If affected systems exist, remediate promptly because session hijacking can affect customer records and transactions. If the product is absent or already at FP2 or later, residual urgency is low. Mitigation focus: Inventory IBM Marketing Platform deployments and confirm exact version and fix-pack level.; For 9.1 before FP2, consult IBM advisory guidance and plan upgrade to FP2 or later where applicable.; Restrict application access to trusted users and networks while remediation is assessed..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.