PT-2023-23733 · Ibm · Ibm Maximo Asset Management+1

Published 2023-09-08 · Updated 2023-09-13 · CVE-2023-32332

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite versions 8.9 through 8.10 IBM Maximo Asset Management versions 7.6.1.2 through 7.6.1.3

Description A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Recommendations For IBM Maximo Application Suite versions 8.9 through 8.10, update to a version that includes the fix for this issue. For IBM Maximo Asset Management versions 7.6.1.2 through 7.6.1.3, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-32332

Affected Products

Ibm Maximo Application Suite

Ibm Maximo Asset Management

References · 9

• https://ibm.com/support/pages/node/7030926 · Vendor Advisory
• https://ibm.com/support/pages/node/7030367 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32332 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/255072 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32332 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1700278113739960613 · Twitter Post
• https://t.me/cvenotify/57825 · Telegram Post
• https://t.me/cibsecurity/70167 · Telegram Post
• https://twitter.com/CVEnew/status/1700241633256603721 · Twitter Post