CVE-2019-4644 IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti...
MediumCVSS 6.1
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170880.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm control desk | = 7.6.1 | No fix listed |
| ibm control desk | = 7.6.1.1 | No fix listed |
| ibm maximo asset configuration manager | = 7.6.6 | No fix listed |
| ibm maximo asset configuration manager | = 7.6.7 | No fix listed |
| ibm maximo asset configuration manager | = 7.6.7.1 | No fix listed |
| ibm maximo asset health insights | = 7.6.1 | No fix listed |
| ibm maximo asset health insights | = 7.6.1.1 | No fix listed |
| ibm maximo asset management | = 7.6.1.1 | No fix listed |
| ibm maximo asset management scheduler | = 7.6.7 | No fix listed |
| ibm maximo asset management scheduler | = 7.6.7.1 | No fix listed |
| ibm maximo asset management scheduler | = 7.6.7.3 | No fix listed |
| ibm maximo asset management scheduler plus | = 7.6.7 | No fix listed |
| ibm maximo asset management scheduler plus | = 7.6.7.1 | No fix listed |
| ibm maximo asset management scheduler plus | = 7.6.7.3 | No fix listed |
| ibm maximo calibration | = 7.6 | No fix listed |
| ibm maximo enterprise adapter | = 7.6 | No fix listed |
| ibm maximo enterprise adapter | = 7.6.1 | No fix listed |
| ibm maximo equipment maintenance assistant | All versions | No fix listed |
| ibm maximo for aviation | = 7.6.6 | No fix listed |
| ibm maximo for aviation | = 7.6.7 | No fix listed |
| ibm maximo for aviation | = 7.6.8 | No fix listed |
| ibm maximo for life sciences | = 7.6 | No fix listed |
| ibm maximo for nuclear power | = 7.6.1 | No fix listed |
| ibm maximo for oil and gas | = 7.6.1 | No fix listed |
| ibm maximo for service providers | = 7.6.3.1 | No fix listed |
Show 18 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm maximo for service providers | = 7.6.3.2 | No fix listed |
| ibm maximo for service providers | = 7.6.3.3 | No fix listed |
| ibm maximo for transportation | = 7.6.2.3 | No fix listed |
| ibm maximo for transportation | = 7.6.2.4 | No fix listed |
| ibm maximo for transportation | = 7.6.2.5 | No fix listed |
| ibm maximo for utilities | = 7.6.0.1 | No fix listed |
| ibm maximo for utilities | = 7.6.0.2 | No fix listed |
| ibm maximo linear asset manager | = 7.6.0.1 | No fix listed |
| ibm maximo linear asset manager | = 7.6.0.2 | No fix listed |
| ibm maximo linear asset manager | = 7.6.0.3 | No fix listed |
| ibm maximo network on blockchain | = 7.6.0.0 | No fix listed |
| ibm maximo network on blockchain | = 7.6.0.1 | No fix listed |
| ibm Maximo Spatial Asset Management | = 7.6.0.2 | No fix listed |
| ibm Maximo Spatial Asset Management | = 7.6.0.3 | No fix listed |
| ibm Maximo Spatial Asset Management | = 7.6.0.4 | No fix listed |
| ibm Maximo Spatial Asset Management | = 7.6.0.5 | No fix listed |
| ibm tivoli integration composer | = 7.6 | No fix listed |
| ibm maximo asset management | = 7.6 | No fix listed |
References
- ibm-maximo-cve20194644-xss (170880) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory