IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 255072.
2023-09-08T20:15:14.583
2024-11-21T08:03:07.907
Modified
CVSSv3.1: 5.4 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | maximo_application_suite | 8.9 | Yes |
| Application | ibm | maximo_application_suite | 8.10 | Yes |
| Application | ibm | maximo_asset_management | 7.6.1.2 | Yes |
| Application | ibm | maximo_asset_management | 7.6.1.3 | Yes |