Lucene search

[email protected]NVD:CVE-2014-0824

HistoryMay 26, 2014 - 4:55 p.m.

CVE-2014-0824

2014-05-2616:55:03

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

36.6%

JSON

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via an attachment URL.

Affected configurations

Nvd

Node

ibmchange_and_configuration_management_databaseMatch7.0

ibmchange_and_configuration_management_databaseMatch7.1

ibmchange_and_configuration_management_databaseMatch7.1.1.7

ibmchange_and_configuration_management_databaseMatch7.1.1.8

ibmchange_and_configuration_management_databaseMatch7.1.1.12

ibmmaximo_service_deskMatch7.1.1.7

ibmmaximo_service_deskMatch7.1.1.8

ibmmaximo_service_deskMatch7.1.1.12

ibmtivoli_it_asset_management_for_itMatch7.1.1.7

ibmtivoli_it_asset_management_for_itMatch7.1.1.8

ibmtivoli_it_asset_management_for_itMatch7.1.1.12

ibmtivoli_service_request_managerMatch7.0

ibmtivoli_service_request_managerMatch7.1.0

ibmtivoli_service_request_managerMatch7.1.1

ibmtivoli_service_request_managerMatch7.1.1.7

ibmtivoli_service_request_managerMatch7.1.1.8

ibmtivoli_service_request_managerMatch7.1.1.12

Node

ibmmaximo_asset_managementMatch7.1

ibmmaximo_asset_managementMatch7.1.1

ibmmaximo_asset_managementMatch7.1.1.1

ibmmaximo_asset_managementMatch7.1.1.2

ibmmaximo_asset_managementMatch7.1.1.5

ibmmaximo_asset_managementMatch7.1.1.6

ibmmaximo_asset_managementMatch7.1.1.7

ibmmaximo_asset_managementMatch7.1.1.8

ibmmaximo_asset_managementMatch7.1.1.12

VendorProductVersionCPE
ibmchange_and_configuration_management_database7.0cpe:2.3:a:ibm:change_and_configuration_management_database:7.0:*:*:*:*:*:*:*
ibmchange_and_configuration_management_database7.1cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:*:*:*:*:*:*:*
ibmchange_and_configuration_management_database7.1.1.7cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.7:*:*:*:*:*:*:*
ibmchange_and_configuration_management_database7.1.1.8cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.8:*:*:*:*:*:*:*
ibmchange_and_configuration_management_database7.1.1.12cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.12:*:*:*:*:*:*:*
ibmmaximo_service_desk7.1.1.7cpe:2.3:a:ibm:maximo_service_desk:7.1.1.7:*:*:*:*:*:*:*
ibmmaximo_service_desk7.1.1.8cpe:2.3:a:ibm:maximo_service_desk:7.1.1.8:*:*:*:*:*:*:*
ibmmaximo_service_desk7.1.1.12cpe:2.3:a:ibm:maximo_service_desk:7.1.1.12:*:*:*:*:*:*:*
ibmtivoli_it_asset_management_for_it7.1.1.7cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.7:*:*:*:*:*:*:*
ibmtivoli_it_asset_management_for_it7.1.1.8cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	change_and_configuration_management_database	7.0	cpe:2.3:a:ibm:change_and_configuration_management_database:7.0:::::::*
ibm	change_and_configuration_management_database	7.1	cpe:2.3:a:ibm:change_and_configuration_management_database:7.1:::::::*
ibm	change_and_configuration_management_database	7.1.1.7	cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.7:::::::*
ibm	change_and_configuration_management_database	7.1.1.8	cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.8:::::::*
ibm	change_and_configuration_management_database	7.1.1.12	cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.12:::::::*
ibm	maximo_service_desk	7.1.1.7	cpe:2.3:a:ibm:maximo_service_desk:7.1.1.7:::::::*
ibm	maximo_service_desk	7.1.1.8	cpe:2.3:a:ibm:maximo_service_desk:7.1.1.8:::::::*
ibm	maximo_service_desk	7.1.1.12	cpe:2.3:a:ibm:maximo_service_desk:7.1.1.12:::::::*
ibm	tivoli_it_asset_management_for_it	7.1.1.7	cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.7:::::::*
ibm	tivoli_it_asset_management_for_it	7.1.1.8	cpe:2.3:a:ibm:tivoli_it_asset_management_for_it:7.1.1.8:::::::*

Rows per page:

1-10 of 261

References

www-01.ibm.com/support/docview.wss?uid=swg1IV52829

www-01.ibm.com/support/docview.wss?uid=swg21670870

exchange.xforce.ibmcloud.com/vulnerabilities/90500

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

36.6%

JSON

Related for NVD:CVE-2014-0824

cve1 cvelist1 prion1 ibm1