Cross-Site Scripting Vulnerability in IBM Maximo for Civil Infrastructure
CVE-2021-20444
6.1MEDIUM
Summary
IBM Maximo for Civil Infrastructure version 7.6.2 exposes users to a cross-site scripting vulnerability. This flaw allows attackers to inject arbitrary JavaScript code into the web user interface, compromising the integrity of the application. By exploiting this weakness, an attacker could manipulate user interactions and actions within a session, potentially leading to unauthorized access to sensitive information, including credentials.
Affected Version(s)
Maximo for Civil Infrastructure 7.6.2
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved