CVE-2011-1396 | BDVDB-2026-49482 Detail

Description#

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg1IV09190
http://www.ibm.com/support/docview.wss?uid=swg21584666
http://secunia.com/advisories/48299
https://exchange.xforce.ibmcloud.com/vulnerabilities/71999
http://www.securityfocus.com/bid/52333

Exploit#

No public exploit known

History#

Version 12012-03-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.