# Vulnerabilities published in 2013


- [CVE-2013-4057](https://insights.sbomify.com/CVE-2013-4057/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-4056](https://insights.sbomify.com/CVE-2013-4056/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-4055](https://insights.sbomify.com/CVE-2013-4055/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4054](https://insights.sbomify.com/CVE-2013-4054/): Path traversal in n/a (medium 4.3)
- [CVE-2013-4053](https://insights.sbomify.com/CVE-2013-4053/): Auth bypass in n/a (medium 6.8)
- [CVE-2013-4052](https://insights.sbomify.com/CVE-2013-4052/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4051](https://insights.sbomify.com/CVE-2013-4051/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4050](https://insights.sbomify.com/CVE-2013-4050/): Cross-site request forgery in n/a (medium 6.0)
- [CVE-2013-4049](https://insights.sbomify.com/CVE-2013-4049/): File upload in n/a (high 8.5)
- [CVE-2013-4048](https://insights.sbomify.com/CVE-2013-4048/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4047](https://insights.sbomify.com/CVE-2013-4047/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4046](https://insights.sbomify.com/CVE-2013-4046/): Open redirect in n/a (medium 5.8)
- [CVE-2013-4045](https://insights.sbomify.com/CVE-2013-4045/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4044](https://insights.sbomify.com/CVE-2013-4044/): Information disclosure in n/a (medium 4.0)
- [CVE-2013-4043](https://insights.sbomify.com/CVE-2013-4043/): Path traversal in n/a (medium 5.0)
- [CVE-2013-4042](https://insights.sbomify.com/CVE-2013-4042/): Code injection in n/a (critical 10.0)
- [CVE-2013-4041](https://insights.sbomify.com/CVE-2013-4041/): Missing authorization in n/a (medium 6.8)
- [CVE-2013-4040](https://insights.sbomify.com/CVE-2013-4040/): Information disclosure in n/a (medium 5.5)
- [CVE-2013-4039](https://insights.sbomify.com/CVE-2013-4039/): Information disclosure in n/a (medium 4.0)
- [CVE-2013-4038](https://insights.sbomify.com/CVE-2013-4038/): Information disclosure in n/a (medium 4.0)
- [CVE-2013-4037](https://insights.sbomify.com/CVE-2013-4037/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-4036](https://insights.sbomify.com/CVE-2013-4036/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4035](https://insights.sbomify.com/CVE-2013-4035/): Security feature bypass in n/a (high 7.3)
- [CVE-2013-4034](https://insights.sbomify.com/CVE-2013-4034/): XML external entity in n/a (medium 4.0)
- [CVE-2013-4033](https://insights.sbomify.com/CVE-2013-4033/): Missing authorization in n/a (medium 4.6)
- [CVE-2013-4032](https://insights.sbomify.com/CVE-2013-4032/): Denial of service in n/a (medium 5.0)
- [CVE-2013-4031](https://insights.sbomify.com/CVE-2013-4031/): Hardcoded credentials in n/a (critical 10.0)
- [CVE-2013-4030](https://insights.sbomify.com/CVE-2013-4030/): Weak cryptography in n/a (medium 4.3)
- [CVE-2013-4027](https://insights.sbomify.com/CVE-2013-4027/): Auth bypass in n/a (medium 6.5)
- [CVE-2013-4025](https://insights.sbomify.com/CVE-2013-4025/): Security feature bypass in n/a (low 1.9)
- [CVE-2013-4024](https://insights.sbomify.com/CVE-2013-4024/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-4022](https://insights.sbomify.com/CVE-2013-4022/): Auth bypass in n/a (low 3.5)
- [CVE-2013-4021](https://insights.sbomify.com/CVE-2013-4021/): Path traversal in n/a (medium 6.5)
- [CVE-2013-4020](https://insights.sbomify.com/CVE-2013-4020/): Auth bypass in n/a (medium 4.0)
- [CVE-2013-4019](https://insights.sbomify.com/CVE-2013-4019/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4018](https://insights.sbomify.com/CVE-2013-4018/): Information disclosure in n/a (medium 6.0)
- [CVE-2013-4017](https://insights.sbomify.com/CVE-2013-4017/): SQL injection in n/a (medium 6.5)
- [CVE-2013-4016](https://insights.sbomify.com/CVE-2013-4016/): SQL injection in n/a (medium 6.5)
- [CVE-2013-4015](https://insights.sbomify.com/CVE-2013-4015/): Security feature bypass in n/a (medium 6.9)
- [CVE-2013-4014](https://insights.sbomify.com/CVE-2013-4014/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-4013](https://insights.sbomify.com/CVE-2013-4013/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-4012](https://insights.sbomify.com/CVE-2013-4012/): Missing authorization in n/a (medium 4.9)
- [CVE-2013-4011](https://insights.sbomify.com/CVE-2013-4011/): Privilege escalation in n/a (high 7.2)
- [CVE-2013-4007](https://insights.sbomify.com/CVE-2013-4007/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4006](https://insights.sbomify.com/CVE-2013-4006/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-4005](https://insights.sbomify.com/CVE-2013-4005/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4004](https://insights.sbomify.com/CVE-2013-4004/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4003](https://insights.sbomify.com/CVE-2013-4003/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-4002](https://insights.sbomify.com/CVE-2013-4002/): Missing XML Validation in Apache Xerces2 (high 7.1)
- [CVE-2013-4001](https://insights.sbomify.com/CVE-2013-4001/): Auth bypass in n/a (medium 4.3)
- [CVE-2013-4000](https://insights.sbomify.com/CVE-2013-4000/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-3999](https://insights.sbomify.com/CVE-2013-3999/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3998](https://insights.sbomify.com/CVE-2013-3998/): Other in n/a (low 3.5)
- [CVE-2013-3997](https://insights.sbomify.com/CVE-2013-3997/): Open redirect in n/a (medium 4.9)
- [CVE-2013-3996](https://insights.sbomify.com/CVE-2013-3996/): Cross-site scripting in n/a (medium 4.9)
- [CVE-2013-3995](https://insights.sbomify.com/CVE-2013-3995/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-3993](https://insights.sbomify.com/CVE-2013-3993/): IBM InfoSphere BigInsights Invalid Input (medium 6.5, exploited in the wild)
- [CVE-2013-3992](https://insights.sbomify.com/CVE-2013-3992/): Cross-site request forgery in n/a (medium 6.0)
- [CVE-2013-3990](https://insights.sbomify.com/CVE-2013-3990/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3989](https://insights.sbomify.com/CVE-2013-3989/): Information disclosure in n/a (low 3.5)
- [CVE-2013-3988](https://insights.sbomify.com/CVE-2013-3988/): Other in n/a (medium 6.8)
- [CVE-2013-3986](https://insights.sbomify.com/CVE-2013-3986/): Denial of service in n/a (medium 4.3)
- [CVE-2013-3985](https://insights.sbomify.com/CVE-2013-3985/): Information disclosure in n/a (low 2.9)
- [CVE-2013-3984](https://insights.sbomify.com/CVE-2013-3984/): Information disclosure in n/a (low 2.9)
- [CVE-2013-3983](https://insights.sbomify.com/CVE-2013-3983/): Open redirect in n/a (high 7.5)
- [CVE-2013-3982](https://insights.sbomify.com/CVE-2013-3982/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-3981](https://insights.sbomify.com/CVE-2013-3981/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-3980](https://insights.sbomify.com/CVE-2013-3980/): Denial of service in n/a (medium 5.0)
- [CVE-2013-3979](https://insights.sbomify.com/CVE-2013-3979/): Cross-site scripting in n/a (low 3.5)
- [CVE-2013-3978](https://insights.sbomify.com/CVE-2013-3978/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-3977](https://insights.sbomify.com/CVE-2013-3977/): Information disclosure in n/a (medium 4.3)
- [CVE-2013-3976](https://insights.sbomify.com/CVE-2013-3976/): Information disclosure in n/a (low 2.1)
- [CVE-2013-3975](https://insights.sbomify.com/CVE-2013-3975/): Information disclosure in n/a (medium 5.0)
- [CVE-2013-3973](https://insights.sbomify.com/CVE-2013-3973/): SQL injection in n/a (medium 6.5)
- [CVE-2013-3972](https://insights.sbomify.com/CVE-2013-3972/): Information disclosure in n/a (medium 4.0)
- [CVE-2013-3971](https://insights.sbomify.com/CVE-2013-3971/): Auth bypass in n/a (medium 4.0)
- [CVE-2013-3970](https://insights.sbomify.com/CVE-2013-3970/): Weak cryptography in n/a (medium 4.3)
- [CVE-2013-3969](https://insights.sbomify.com/CVE-2013-3969/): Null dereference in n/a (medium 6.5)
- [CVE-2013-3964](https://insights.sbomify.com/CVE-2013-3964/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3963](https://insights.sbomify.com/CVE-2013-3963/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2013-3962](https://insights.sbomify.com/CVE-2013-3962/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2013-3961](https://insights.sbomify.com/CVE-2013-3961/): SQL injection in n/a (medium 6.5)
- [CVE-2013-3960](https://insights.sbomify.com/CVE-2013-3960/): Missing authorization in n/a (critical 9.9)
- [CVE-2013-3959](https://insights.sbomify.com/CVE-2013-3959/): Information disclosure in n/a (medium 4.0)
- [CVE-2013-3958](https://insights.sbomify.com/CVE-2013-3958/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2013-3957](https://insights.sbomify.com/CVE-2013-3957/): SQL injection in n/a (high 7.5)
- [CVE-2013-3956](https://insights.sbomify.com/CVE-2013-3956/): Privilege escalation in n/a (high 7.2)
- [CVE-2013-3955](https://insights.sbomify.com/CVE-2013-3955/): Memory corruption in n/a (medium 6.2)
- [CVE-2013-3954](https://insights.sbomify.com/CVE-2013-3954/): Information disclosure in n/a (medium 6.9)
- [CVE-2013-3953](https://insights.sbomify.com/CVE-2013-3953/): Information disclosure in n/a (medium 4.9)
- [CVE-2013-3952](https://insights.sbomify.com/CVE-2013-3952/): Security feature bypass in n/a (low 2.1)
- [CVE-2013-3951](https://insights.sbomify.com/CVE-2013-3951/): Security feature bypass in n/a (medium 4.6)
- [CVE-2013-3950](https://insights.sbomify.com/CVE-2013-3950/): Memory corruption in n/a (medium 5.0)
- [CVE-2013-3949](https://insights.sbomify.com/CVE-2013-3949/): Privilege escalation in n/a (low 2.1)
- [CVE-2013-3948](https://insights.sbomify.com/CVE-2013-3948/): Open redirect in n/a (medium 4.3)
- [CVE-2013-3947](https://insights.sbomify.com/CVE-2013-3947/): Memory corruption in n/a (high 7.8)
- [CVE-2013-3946](https://insights.sbomify.com/CVE-2013-3946/): Memory corruption in MrSID plugin (high 7.8)
- [CVE-2013-3945](https://insights.sbomify.com/CVE-2013-3945/): Memory corruption in MrSID plugin (high 7.8)
- [CVE-2013-3944](https://insights.sbomify.com/CVE-2013-3944/): Memory corruption in MrSID plugin (high 7.8)
- [CVE-2013-3943](https://insights.sbomify.com/CVE-2013-3943/): Cross-site scripting in n/a (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2013/page/27/