Unscored CVE-2011-1395 EUVD-2011-1402GHSA-42wr-wq4p-6pw9

Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 all…

Published Mar 13, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the controlid parameter.

References

maximo-imicon-xss(71996) vdb-entry
http://www.ibm.com/support/docview.wss?uid=swg21584666
48299 third-party-advisory
52333 vdb-entry
IV09189 vendor-advisory