Описание
IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 262192.
Ссылки
- Not Applicable
- Vendor Advisory
- Not Applicable
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ibm:maximo_application_suite:7.6.1.3:*:*:*:*:*:*:*
EPSS
Процентиль: 21%
0.00068
Низкий
6.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.4
github
почти 2 года назад
IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 262192.
EPSS
Процентиль: 21%
0.00068
Низкий
6.4 Medium
CVSS3
Дефекты
CWE-79