Skip to content
OpenAdvisories
Medium WID-SEC-2023-0963 1 CVE

IBM Maximo Asset Management: Schwachstelle ermöglicht Cross-Site Scripting

Published Apr 13, 2023 · Updated Apr 13, 2023 · de-DE

Vendor: IBM Product: Maximo Asset Management Product: Maximo Asset Management 7.6.1.2 Product: Maximo Asset Management 7.6.1.3 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 1

  • Medium 5.4
    CVE-2022-43866

    IBM Maximo Asset Management cross-site scripting

    IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with…

    IBM Maximo Asset Management

Revision history

  1. #1

    Initiale Fassung

References