description: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
problem types: Cross-Site Scripting
affected:
{
product: Maximo Asset Management
vendor: IBM Corporation
versions:
status: affected, version: 6.2
status: affected, version: 7.1
status: affected, version: 7.5
status: affected, version: 7.5.0.0
status: affected, version: 7.5.0.10
status: affected, version: 7.1.0.0
status: affected, version: 6.2.0.0
status: affected, version: 7.2
status: affected, version: 7.1.1
status: affected, version: 7.1.2
status: affected, version: 7.2.1
status: affected, version: 6.2.1
status: affected, version: 6.2.2
status: affected, version: 6.2.3
status: affected, version: 6.2.4
status: affected, version: 6.2.5
status: affected, version: 6.2.6
status: affected, version: 6.2.7
status: affected, version: 6.2.8
status: affected, version: 7.1.1.1
status: affected, version: 7.1.1.10
status: affected, version: 7.1.1.11
status: affected, version: 7.1.1.12
status: affected, version: 7.1.1.2
status: affected, version: 7.1.1.5
status: affected, version: 7.1.1.6
status: affected, version: 7.1.1.7
status: affected, version: 7.1.1.8
status: affected, version: 7.1.1.9
status: affected, version: 7.5.0.1
status: affected, version: 7.5.0.2
status: affected, version: 7.5.0.3
status: affected, version: 7.5.0.4
status: affected, version: 7.5.0.5
status: affected, version: 7.6
status: affected, version: 7.5.0
status: affected, version: 7.6.0
}