NetSight
IP …
medium4.3

CVE-2012-3328

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2…

Impact

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.

Affected products

VendorProductAffected versions
IbmChange And Configuration Management Database
Versions 7.1., 7.2.0
IbmMaximo Asset Management
Version 7.1
IbmMaximo Asset Management Essentials
Version 7.1
IbmTivoli Asset Management For It
Versions 7.1, 7.2
IbmTivoli Service Request Manager
Versions 7.1.0, 7.1.0.0, 7.2.0.0

Weakness classification

CWE-79

References