Unscored CVE-2011-1396 EUVD-2011-1403GHSA-6hxv-6w4p-6pv3

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote att…

Published Mar 13, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component.

References

IV09190 vendor-advisory
http://www.ibm.com/support/docview.wss?uid=swg21584666
48299 third-party-advisory
maximo-reporttype-xss(71999) vdb-entry
52333 vdb-entry