Unscored CVE-2007-5949 EUVD-2007-5919GHSA-fvwr-ccvc-23cc

Cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or…

Published Nov 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action.

References

ADV-2007-3709 vdb-entry
38394 vdb-entry
ibm-maximo-description-xss(38214) vdb-entry
IZ06387 vendor-advisory
27472 third-party-advisory
26305 vdb-entry