Security Bulletin: IBM Maximo Asset Management is vulnerable to Stored Cross-site Scripting (CVE-2021-29743)

Summary IBM Maximo Asset Management is vulnerable to stored cross-site scripting. Vulnerability Details CVEID: CVE-2021-29743 DESCRIPTION: IBM Maximo Asset Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu...

CVE-2021-29743

CVE-2021-29743 concerns IBM Maximo Asset Management core products: 7.6.0.x and 7.6.1.x, affected by a stored cross‑site scripting vulnerability in the web UI that could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM Security...

CVE-2021-29743

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force I...