Skip to content
OpenAdvisories
Medium WID-SEC-2025-0883 1 CVE

IBM Maximo Asset Management: Schwachstelle ermöglicht Cross-Site Scripting

Published Apr 24, 2025 · Updated Apr 24, 2025 · de-DE

Vendor: IBM Product: Maximo Asset Management Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 1

  • Medium 5.5
    CVE-2025-2986

    IBM Maximo Asset Management cross-site scripting

    IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu…

    IBM Maximo Asset Management

Revision history

  1. #1

    Initiale Fassung

References