PT-2015-4474 · Ibm · Change/Configuration Management Database+10

Jakub Palaczynski + 1 · Publicado 2015-02-18 · Atualizado 2017-09-08 · CVE-2015-0108

Mitre

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-0104, CVE-2015-0107, and CVE-2015-0109.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-0108

Produtos afetados

Change/Configuration Management Database

Ibm Maximo Asset Management

Ibm Maximo Asset Management Essentials

Maximo For Government

Maximo For Life Sciences

Maximo For Nuclear Power

Maximo For Oil/Gas

Maximo For Transportation

Maximo For Utilities

Tivoli Asset Management For It

Tivoli Service Request Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0108 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99605 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21694974 · Aviso do Fabricante