IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm tivoli integration composer - |
||
ibm tivoli service request manager - |
||
ibm smartcloud control desk - |
||
ibm maximo for life sciences - |
||
ibm tivoli asset management for it - |
||
ibm maximo asset management 7.6.0.0 |
||
ibm maximo for transportation - |
||
ibm maximo for nuclear power - |
||
ibm maximo for aviation - |
||
ibm maximo for oil and gas - |
||
ibm maximo for utilities - |
||
ibm tivoli change and configuration management database - |
Vulmon