Skip to content
OpenAdvisories
Medium WID-SEC-2025-1399 1 CVE

IBM Maximo Asset Management: Schwachstelle ermöglicht Cross-Site Scripting

Published Jun 25, 2025 · Updated Jun 25, 2025 · de-DE

Vendor: IBM Product: Maximo Asset Management Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Maximo Asset Management ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Maximo Asset Management ist ein Enterprise-Asset-Management-System, das umfassenden Support für Assets, Maintenance, Ressourcen und Supply-Chain-Management-Anforderungen bietet.

Vulnerabilities 1

  • Medium 4.9
    CVE-2024-53382

    PrismJS DOM Clobbering vulnerability

    Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.

    prismjs prism node-prismjs prismjs Debian Ubuntu npm

Revision history

  1. #1

    Initiale Fassung

References