Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 up to and including 6.2.8, 6.x and 7.1 up to and including 7.1.1.2, and 7.5 up to and including 7.5.0.6; Maximo Asset Management 7.5 up to and including 7.5.0.3 and 7.5.1 up to and including 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 up to and including 6.2.8, 7.1 up to and including 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm smartcloud control desk 7.5.0.1 |
||
ibm smartcloud control desk 7.5.0.2 |
||
ibm maximo asset management 6.2.3 |
||
ibm maximo asset management 6.2.4 |
||
ibm maximo asset management 7.1.1 |
||
ibm maximo asset management 7.1.1.1 |
||
ibm maximo asset management 7.1.1.7 |
||
ibm maximo asset management 7.1.1.8 |
||
ibm maximo asset management 7.5.0.4 |
||
ibm maximo asset management 7.5.0.5 |
||
ibm maximo asset management essentials 7.5.0.3 |
||
ibm maximo for government 7.1 |
||
ibm maximo for life sciences 7.1 |
||
ibm maximo for life sciences 7.5.0.0 |
||
ibm maximo for nuclear power 7.5.0.1 |
||
ibm maximo for nuclear power 7.5.0.2 |
||
ibm maximo for oil and gas 7.5.0.2 |
||
ibm maximo for oil and gas 7.5.0.3 |
||
ibm maximo for transportation 7.5.0.3 |
||
ibm maximo for transportation 7.5.0.4 |
||
ibm maximo for utilities 7.5.0.5 |
||
ibm maximo asset management essentials |
||
ibm smartcloud control desk |
||
ibm maximo service desk |
||
ibm maximo asset management essentials 7.5.0.4 |
||
ibm maximo asset management essentials 7.5.0.5 |
||
ibm smartcloud control desk 7.5.1.1 |
||
ibm smartcloud control desk 7.5.1.2 |
||
ibm maximo asset management 6.2.6.1 |
||
ibm maximo asset management 6.2.7 |
||
ibm maximo asset management 7.1.1.12 |
||
ibm maximo asset management 7.1.1.2 |
||
ibm maximo asset management 7.5.0.0 |
||
ibm maximo asset management 7.5.0.1 |
||
ibm maximo asset management 7.5.0.10 |
||
ibm maximo asset management essentials 7.1 |
||
ibm maximo asset management essentials 7.5.0.0 |
||
ibm maximo for government 7.5.0.2 |
||
ibm maximo for government 7.5.0.3 |
||
ibm maximo for life sciences 7.5.0.4 |
||
ibm maximo for life sciences 7.5.0.5 |
||
ibm maximo for nuclear power 7.5.0.5 |
||
ibm maximo for oil and gas 7.1 |
||
ibm maximo for transportation 7.1 |
||
ibm maximo for transportation 7.5.0.0 |
||
ibm maximo for utilities 7.5.0.1 |
||
ibm maximo for utilities 7.5.0.2 |
||
ibm maximo for transportation |
||
ibm maximo for life sciences |
||
ibm smartcloud control desk 7.5.0.3 |
||
ibm smartcloud control desk 7.5.1.0 |
||
ibm maximo asset management 6.2.5 |
||
ibm maximo asset management 6.2.6 |
||
ibm maximo asset management 7.1.1.10 |
||
ibm maximo asset management 7.1.1.11 |
||
ibm maximo asset management 7.1.1.9 |
||
ibm maximo asset management 7.1.2 |
||
ibm maximo asset management 7.5.0.6 |
||
ibm maximo asset management essentials 6.2.0.0 |
||
ibm maximo for government 7.5.0.0 |
||
ibm maximo for government 7.5.0.1 |
||
ibm maximo for life sciences 7.5.0.1 |
||
ibm maximo for life sciences 7.5.0.2 |
||
ibm maximo for life sciences 7.5.0.3 |
||
ibm maximo for nuclear power 7.5.0.3 |
||
ibm maximo for nuclear power 7.5.0.4 |
||
ibm maximo for oil and gas 7.5.0.4 |
||
ibm maximo for oil and gas 7.5.0.5 |
||
ibm maximo for transportation 7.5.0.5 |
||
ibm maximo for utilities 7.1 |
||
ibm maximo for utilities 7.5.0.0 |
||
ibm maximo for government |
||
ibm maximo for nuclear power |
||
ibm tivoli it asset management for it |
||
ibm smartcloud control desk 7.5 |
||
ibm smartcloud control desk 7.5.0.0 |
||
ibm maximo asset management 6.2 |
||
ibm maximo asset management 6.2.1 |
||
ibm maximo asset management 6.2.2 |
||
ibm maximo asset management 6.2.8 |
||
ibm maximo asset management 7.1 |
||
ibm maximo asset management 7.1.1.5 |
||
ibm maximo asset management 7.1.1.6 |
||
ibm maximo asset management 7.5.0.2 |
||
ibm maximo asset management 7.5.0.3 |
||
ibm maximo asset management essentials 7.5.0.1 |
||
ibm maximo asset management essentials 7.5.0.2 |
||
ibm maximo for government 7.5.0.4 |
||
ibm maximo for government 7.5.0.5 |
||
ibm maximo for nuclear power 7.1 |
||
ibm maximo for nuclear power 7.5.0.0 |
||
ibm maximo for oil and gas 7.5.0.0 |
||
ibm maximo for oil and gas 7.5.0.1 |
||
ibm maximo for transportation 7.5.0.1 |
||
ibm maximo for transportation 7.5.0.2 |
||
ibm maximo for utilities 7.5.0.3 |
||
ibm maximo for utilities 7.5.0.4 |
||
ibm maximo for oil and gas |
||
ibm maximo for utilities |
Vulmon