CVE-2012-3328 | BDVDB-2026-54679 Detail

Description#

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21625624
https://exchange.xforce.ibmcloud.com/vulnerabilities/78040
http://www-01.ibm.com/support/docview.wss?uid=swg1IV20823

Exploit#

No public exploit known

History#

Version 12013-02-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.