PT-2016-3784 · Ibm · Ibm Maximo Asset Management

Publicado

2016-01-02

·

Atualizado

2016-01-06

·

CVE-2015-7451

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.5 before 7.5.0.9 IF2 IBM Maximo Asset Management versions 7.5.1 and earlier IBM Maximo Asset Management versions 7.6 before 7.6.0.3 FP3
Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This can be exploited by injecting malicious code into a website, potentially leading to unauthorized access or control.
Recommendations For IBM Maximo Asset Management version 7.5, update to 7.5.0.9 IF2 or later. For IBM Maximo Asset Management version 7.5.1, update to a version later than 7.5.1. For IBM Maximo Asset Management version 7.6, update to 7.6.0.3 FP3 or later.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-7451

Produtos afetados

Ibm Maximo Asset Management