Skip to content
OpenAdvisories
Medium WID-SEC-2024-1368 3 CVEs

IBM Maximo Asset Management: Mehrere Schwachstellen

Published Jun 12, 2024 · Updated Jun 12, 2024 · de-DE

Vendor: IBM Product: Maximo Asset Management Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um Informationen offenzulegen und um Cross-Site Scripting Angriffe durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 3

  • Medium 4.3
    CVE-2024-29203

    TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes

    TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content insertion code. This allowed `iframe` elements containing malicious code to execute when inserted into the editor. These `iframe` elemen…

    tinymce tinymce tinymce tinymce Ubuntu npm Packagist NuGet
  • Medium 4.3
    CVE-2024-29881

    TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements

    TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content loading and content inserting code. A SVG image could be loaded though an `object` or `embed` element and that image could potentially c…

    tinymce tinymce tinymce tinymce Ubuntu npm Packagist NuGet
  • Low 3.3
    CVE-2024-22333

    IBM Maximo Application Suite information disclosure

    IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

    IBM Maximo Asset Management Maximo Application Suite

Revision history

  1. #1

    Initiale Fassung

References