CVE-2012-3313

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Asset Management For It
Maximo Asset Management
Smartcloud Control Desk
Change And Configuration Management Database
Vendor
CVE Published:
10 September 2012

Summary

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV15530
vendor-advisoryx_refsource_AIXAPAR
http://secunia.com/advisories/50551
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/77787
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.