CVE-2013-5402

🗓️ 18 Dec 2013 11:00:00Reported by ibmType

IBM Maximo Asset Management and related software versions 7.1.x through 7.1.1.12, 7.1.2, 7.5 before 7.5.0.3 IFIX014, and 7.5.0.5 before IFIX003, SmartCloud Control Desk (SCCD) 7.5 before 7.5.0.3 IFIX014 and 7.5.0.5 before IFIX003, and Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.1.x through 7.1.1.12, 7.1.2, and 7.2.x through 7.2.1 allow remote authenticated users to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 6
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities Addressed in Asset and Service Mgmt	17 Jun 201814:40	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerability With Maximo Asset Management	17 Jun 201814:31	–	ibm
CVE	CVE-2013-5402	18 Dec 201311:00	–	cve
EUVD	EUVD-2013-5242	7 Oct 202500:30	–	euvd
NVD	CVE-2013-5402	18 Dec 201316:04	–	nvd
Prion	Cross site scripting	18 Dec 201316:04	–	prion

Source	Link
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/64333
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/87298

28 Aug 2017 12:57Current

5.2Medium risk

Vulners AI Score5.2

EPSS0.0018