The IBM InfoSphere Identity Insight’s Help System may display sensitive information. (CVE-2013-0599)
An attacker can trick a user into inserting a mal-formed URL address into a browser or clicking on a mal-formed URL link and exploit a cross-site scripting vulnerability that can be used to gain unauthorized access or collect sensitive information.
Affected product(s) and affected version(s):
IBM InfoSphere Identity Insight Versions 8.0, 8.1