CVE-2012-0746: XSS
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0746?
CVE-2012-0746 is classified as a medium-severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2012-0746?
To mitigate CVE-2012-0746, update your IBM Maximo Asset Management and related applications to the latest version that addresses this vulnerability.
Which products are affected by CVE-2012-0746?
CVE-2012-0746 affects IBM Maximo Asset Management 7.5 and several related products such as IBM SmartCloud Control Desk and Tivoli Asset Management.
Who is at risk from CVE-2012-0746?
Remote authenticated users who interact with the affected IBM products may be at risk from CVE-2012-0746.
What impact does CVE-2012-0746 have?
CVE-2012-0746 could allow an attacker to inject malicious scripts into web pages viewed by other users.