Lucene search

[email protected]NVD:CVE-2012-0746

HistorySep 10, 2012 - 5:55 p.m.

CVE-2012-0746

2012-09-1017:55:01

CWE-79

[email protected]

web.nvd.nist.gov

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.7%

JSON

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

ibmchange_and_configuration_management_databaseMatch6.0

ibmchange_and_configuration_management_databaseMatch7.0

ibmmaximo_asset_managementMatch7.5.0.0

ibmmaximo_service_deskMatch6.2

ibmsmartcloud_control_deskMatch7.0

ibmtivoli_asset_management_for_itMatch6.0

ibmtivoli_asset_management_for_itMatch6.2

ibmtivoli_asset_management_for_itMatch7.0

ibmtivoli_asset_management_for_itMatch7.1

ibmtivoli_asset_management_for_itMatch7.2

ibmtivoli_service_request_managerMatch7.0

References

secunia.com/advisories/50551

www-01.ibm.com/support/docview.wss?uid=swg1IV17961

www-01.ibm.com/support/docview.wss?uid=swg21610081

exchange.xforce.ibmcloud.com/vulnerabilities/74726

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.7%

JSON

Related for NVD:CVE-2012-0746

cve1 prion1 cvelist1 ibm1