Cross site scripting

🗓️ 18 Dec 2013 16:04:00Reported by PRIOn knowledge baseType

IBM Maximo Asset Management and other related software versions 7.1.x through 7.1.1.12, 7.1.2, 7.5 before 7.5.0.3 IFIX014, and 7.5.0.5 before IFIX003, SmartCloud Control Desk (SCCD) 7.5 before 7.5.0.3 IFIX014 and 7.5.0.5 before IFIX003, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and CCMDB 7.1.x through 7.1.1.12, 7.1.2, and 7.2.x through 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 6
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities Addressed in Asset and Service Mgmt	17 Jun 201814:40	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Security Vulnerability With Maximo Asset Management	17 Jun 201814:31	–	ibm
CVE	CVE-2013-5402	18 Dec 201311:00	–	cve
Cvelist	CVE-2013-5402	18 Dec 201311:00	–	cvelist
EUVD	EUVD-2013-5242	7 Oct 202500:30	–	euvd
NVD	CVE-2013-5402	18 Dec 201316:04	–	nvd

Source	Link
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/64333
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/87298

29 Aug 2017 01:33Current

5.6Medium risk

Vulners AI Score5.6

EPSS0.0018