Skip to content
OpenAdvisories
Medium WID-SEC-2023-0790 3 CVEs

IBM Maximo Asset Management: Mehrere Schwachstellen

Published Mar 28, 2023 · Updated Mar 28, 2023 · de-DE

Vendor: IBM Product: Maximo Asset Management Product: Maximo Asset Management 7.6.1.2 Product: Maximo Asset Management 7.6.1.3

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder einen Denial of Service Zustand herbeizuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 3

  • Medium 5.4
    CVE-2022-23494

    Cross-site scripting vulnerability in TinyMCE alerts

    tinymce is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in the alert and confirm dialogs when these dialogs were provided with malicious HTML content. This can occur in plugins that use the alert or confirm dialog…

    tinymce tinymce tinymce tinymce Ubuntu npm Packagist NuGet
  • Medium —
    CVE-2019-1010091

    XSS in TinyMCE

    tinymce 4.7.11, 4.7.12 is affected by: CWE-79: Improper Neutralization of Input During Web Page Generation. The impact is: JavaScript code execution. The component is: Media element. The attack vector is: The victim must paste malicious content to media eleme…

    tinymce tinymce tinymce tinymce Ubuntu npm
  • High —
    CVE-2020-17480

    Cross-site scripting vulnerability in TinyMCE

    TinyMCE before 4.9.7 and 5.x before 5.1.4 allows XSS in the core parser, the paste plugin, and the visualchars plugin by using the clipboard or APIs to insert content into the editor.

    tinymce tinymce Ubuntu npm

Revision history

  1. #1

    Initiale Fassung

References