Lucene search

[email protected]CVE-2014-0893

HistoryMay 26, 2014 - 4:55 p.m.

CVE-2014-0893

2014-05-2616:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2014-0893

cross-site scripting

xss

ibm maximo

asset management

smartcloud control desk

remote authenticated users

arbitrary web script

html

vulnerability

5.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.9%

JSON

Cross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

CPENameOperatorVersion
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.5
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.4
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.1
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.2
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.0
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.3
ibm:smartcloud_control_deskibm smartcloud control deskeq7.5.1.0
ibm:smartcloud_control_deskibm smartcloud control deskeq7.5
ibm:smartcloud_control_deskibm smartcloud control deskeq7.0
ibm:smartcloud_control_deskibm smartcloud control deskeq7.5.0.3

CPE	Name	Operator	Version
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.5
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.4
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.2
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.0
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.3
ibm:smartcloud_control_desk	ibm smartcloud control desk	eq	7.5.1.0
ibm:smartcloud_control_desk	ibm smartcloud control desk	eq	7.5
ibm:smartcloud_control_desk	ibm smartcloud control desk	eq	7.0
ibm:smartcloud_control_desk	ibm smartcloud control desk	eq	7.5.0.3

Rows per page:

1-10 of 151

References

www-01.ibm.com/support/docview.wss?uid=swg1IV55019

www-01.ibm.com/support/docview.wss?uid=swg21670870

exchange.xforce.ibmcloud.com/vulnerabilities/91287

5.3 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.9%

JSON

Related for CVE-2014-0893

cvelist1 prion1 ibm1