Read the docs
TI-2013-04442 Aliases CVE-2013-5118GHSA-rcpq-x67x-969m

Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659…

Priority LOW 25CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail message.

Why it matters now

EPSS 0.02418 84th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:a:good:good_for_enterprise:*:*:*:*:*:*:*:*up to 2.2.3VulnerableGood
cpe:2.3:a:good:good_for_enterprise:1.9.8:*:*:*:*:*:*:*1.9.8VulnerableGood
cpe:2.3:a:good:good_for_enterprise:1.9.9:*:*:*:*:*:*:*1.9.9VulnerableGood
cpe:2.3:a:good:good_for_enterprise:1.9.10:*:*:*:*:*:*:*1.9.10VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.0.3.1464:*:*:*:*:*:*:*2.0.3.1464VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.1.2.1510:*:*:*:*:*:*:*2.1.2.1510VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.1.3.1513:*:*:*:*:*:*:*2.1.3.1513VulnerableGood
  • cpe:2.3:a:good:good_for_enterprise:*:*:*:*:*:*:*:* Versions up to 2.2.3 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:1.9.8:*:*:*:*:*:*:* Versions 1.9.8 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:1.9.9:*:*:*:*:*:*:* Versions 1.9.9 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:1.9.10:*:*:*:*:*:*:* Versions 1.9.10 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.0.3.1464:*:*:*:*:*:*:* Versions 2.0.3.1464 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.1.2.1510:*:*:*:*:*:*:* Versions 2.1.2.1510 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.1.3.1513:*:*:*:*:*:*:* Versions 2.1.3.1513 Vulnerable ·Good
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:good:good_for_enterprise:2.1.4.1518:*:*:*:*:*:*:*2.1.4.1518VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.1.5.1551:*:*:*:*:*:*:*2.1.5.1551VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.2.0.1575:*:*:*:*:*:*:*2.2.0.1575VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.2.1.1591:*:*:*:*:*:*:*2.2.1.1591VulnerableGood
cpe:2.3:a:good:good_for_enterprise:2.2.2:*:*:*:*:*:*:*2.2.2VulnerableGood
  • cpe:2.3:a:good:good_for_enterprise:2.1.4.1518:*:*:*:*:*:*:* Versions 2.1.4.1518 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.1.5.1551:*:*:*:*:*:*:* Versions 2.1.5.1551 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.2.0.1575:*:*:*:*:*:*:* Versions 2.2.0.1575 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.2.1.1591:*:*:*:*:*:*:* Versions 2.2.1.1591 Vulnerable ·Good
  • cpe:2.3:a:good:good_for_enterprise:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Good

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-5118
  2. 2026-10-03 Alias added: GHSA-rcpq-x67x-969m

References

Exploit 2

  • TI-2014-04048 Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40. CVSS 3.0MEDIUM 6.1
  • TI-2015-07612 The Good for Enterprise application 3.0.0.415 for Android does not use signature… CVSS 3.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences