Lucene search
K

4 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2023/06/05 3:57 p.m.24 views

Security Bulletin: IBM Maximo Asset Management is vulnerable to stored cross-site scripting (CVE-2022-35645)

Summary IBM Maximo Asset Management is vulnerable to stored cross-site scripting. Vulnerability Details CVEID:CVE-2022-35645 DESCRIPTION: IBM Maximo Asset Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

6.4CVSS5.6AI score0.00493EPSS
Exploits0Affected Software11
OSV
OSV
added 2023/03/02 9:15 p.m.5 views

CVE-2022-35645

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

5.4CVSS5.5AI score0.00493EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/03/02 8:14 p.m.8 views

CVE-2022-35645 IBM Maximo Asset Management cross-site scripting

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

6.4CVSS6AI score0.00493EPSS
Exploits0References3
CVE
CVE
added 2023/03/02 8:14 p.m.81 views

CVE-2022-35645

The CVE-2022-35645 issue affects IBM Maximo Asset Management core products versions 7.6.1.1–7.6.1.3 and IBM Maximo Application Suite versions 8.8–8.9, with stored cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript and potentially disclose credentials in a trusted s...

6.4CVSS5.3AI score0.00493EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder