Skip to content
OpenAdvisories
Medium WID-SEC-2024-2071 2 CVEs

IBM Maximo Asset Management: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Sep 5, 2024 · Updated Sep 5, 2024 · de-DE

Vendor: IBM Product: Maximo Asset Management Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 2

  • Medium 6.1
    CVE-2024-38356

    TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

    TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content extraction code. When using the `noneditable_regexp` option, specially crafted HTML attributes containing malicious code were able to be…

    tinymce tinymce roundcube tinymce Ubuntu npm Packagist PyPI NuGet
  • Medium 6.1
    CVE-2024-38357

    TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

    TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded int…

    tinymce tinymce roundcube tinymce Ubuntu npm Packagist PyPI NuGet

Revision history

  1. #1

    Initiale Fassung

References