CVE-2013-6320: Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0...

Security readout for executives and security teams

CVE-2013-6320 is an authenticated cross-site scripting issue in IBM Algo One web components. A logged-in user could inject script or HTML through unspecified inputs, potentially affecting other users of those web interfaces. The public bundle does not provide severity scoring, affected CPEs, or confirmed exploitation. Exposure appears limited to organizations running the named IBM Algo One web components and versions. Because exploitation requires authentication, risk depends on who has access, privilege levels, and whether the affected interfaces are reachable beyond trusted administration networks. Treat this as a targeted legacy-product exposure review, not an internet-wide emergency based on the provided evidence. Prioritize if IBM Algo One systems remain in production, especially where many users can authenticate or the applications handle sensitive risk and access-control data. Mitigation focus: Check IBM support guidance for applicable fixes or configuration advice.; Inventory Algo One, UDS, ACSWeb, and AlgoWebApps versions.; Restrict affected web interfaces to trusted authenticated users only..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.