# CVEs published 2013-12-22

8 CVEs were published on December 22, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-3705](https://cve.now/CVE-2013-3705.md): The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and (no CVSS)
- [CVE-2013-4012](https://cve.now/CVE-2013-4012.md): IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for (no CVSS)
- [CVE-2013-5421](https://cve.now/CVE-2013-5421.md): Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM (no CVSS)
- [CVE-2013-6316](https://cve.now/CVE-2013-6316.md): IBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not properly handle content-selection changes during T (no CVSS)
- [CVE-2013-6328](https://cve.now/CVE-2013-6328.md): Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x t (no CVSS)
- [CVE-2013-6723](https://cve.now/CVE-2013-6723.md): IBM WebSphere Portal 8.0.0.1 before CF09 does not properly handle references in compute="always" Web Content Manager (WCM) navigator compone (no CVSS)
- [CVE-2013-6735](https://cve.now/CVE-2013-6735.md): IBM WebSphere Portal 6.0.0.x through 6.0.0.1, 6.0.1.x through 6.0.1.7, 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x t (no CVSS)
- [CVE-2013-6745](https://cve.now/CVE-2013-6745.md): Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.