XSS Vulnerability in IBM Maximo Asset Management Products
CVE-2012-3326

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Asset Management For It
Smartcloud Control Desk
Change And Configuration Management Database
Maximo Asset Management
Vendor
CVE Published:
10 September 2012

Summary

A Cross-Site Scripting (XSS) vulnerability exists in IBM Maximo Asset Management version 7.5 and its associated products, which allows attackers to inject arbitrary web scripts or HTML through unspecified vectors. This weakness exposes applications using these products to potential exploitation, allowing malicious actors to manipulate users' sessions and execute malicious code. It's essential for organizations utilizing IBM Maximo to implement protective measures and keep systems updated to mitigate associated risks.

References

http://secunia.com/advisories/50551
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/77960
vdb-entryx_refsource_XF
http://www-01.ibm.com/support/docview.wss?uid=swg21610081
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.