Unscored CVE-2011-4819 EUVD-2011-4737GHSA-53r5-8crq-7gxf

Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow …

Published Mar 13, 2012 · Updated Aug 7, 2024 · Assigned by ibm

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/.

References

http://www.ibm.com/support/docview.wss?uid=swg21584666
maximo-uisesionid-xss(72008) vdb-entry
48299 third-party-advisory
52333 vdb-entry
IV09202 vendor-advisory