CVE-2013-6745: Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for...

Security readout for executives and security teams

CVE-2013-6745 is an authenticated cross-site scripting issue in IBM Security Access Manager for Enterprise Single Sign-On. A logged-in remote user could inject script or HTML through a dynamic IMS server form, potentially affecting other users who view the resulting content. Exposure appears limited to organizations running IBM Security Access Manager for Enterprise Single Sign-On 8.2 IMS server versions before Ifix 6. Systems not using ISAM ESSO IMS are not indicated as affected by the supplied sources. Treat this as a targeted remediation item for legacy identity infrastructure. It is not marked as actively exploited, but XSS in an enterprise single sign-on component can create user trust and session-risk concerns. Mitigation focus: Confirm whether ISAM ESSO 8.2 IMS server is deployed.; Apply IBM Ifix 6 or later vendor guidance where applicable.; Restrict IMS access to trusted authenticated users until remediated..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.