CVE-2012-0195: XSS
Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via the display name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0195?
CVE-2012-0195 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-0195?
To fix CVE-2012-0195, you should apply the latest patches and updates provided by IBM for the affected products.
Which IBM products are affected by CVE-2012-0195?
CVE-2012-0195 affects IBM Maximo Asset Management, Tivoli Asset Management for IT, and Tivoli Service Request Manager across several versions.
Can CVE-2012-0195 be exploited remotely?
Yes, CVE-2012-0195 can be exploited remotely, allowing attackers to execute malicious scripts in the context of a user's session.
What are the potential impacts of CVE-2012-0195?
The potential impacts of CVE-2012-0195 include unauthorized access to sensitive information and manipulation of web application functionality.