CVE-2014-0824

Опубликовано: 26 мая 2014

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via an attachment URL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:change_and_configuration_management_database:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_service_desk:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_service_desk:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_service_desk:7.1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_service_request_manager:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.1.12:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00161

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-hxgf-jcp9-6gh6

github

больше 3 лет назад