CVE-2012-3328: XSS

Published Feb 20, 2013

Updated

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.

Affected Software

9 affected components

IBM Change and Configuration Management Database=7.1.

IBM Change and Configuration Management Database=7.2.0

IBM Maximo Asset Management=7.1

IBM Maximo Asset Management Essentials=7.1

IBM Tivoli Asset Management for IT=7.1

IBM Tivoli Asset Management for IT=7.2

IBM Tivoli Service Request Manager=7.1.0

IBM Tivoli Service Request Manager=7.1.0.0

IBM Tivoli Service Request Manager=7.2.0.0

Event History

Feb 20, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3328?

CVE-2012-3328 is classified as a medium severity vulnerability due to its potential to enable cross-site scripting attacks.

What types of software are affected by CVE-2012-3328?

CVE-2012-3328 affects IBM Maximo Asset Management versions 7.1, Tivoli Asset Management for IT versions 7.1 and 7.2, and Tivoli Service Request Manager versions 7.1 and 7.2, among others.

How do I fix CVE-2012-3328?

To fix CVE-2012-3328, it is recommended to apply the latest security patches or updates provided by IBM for the affected software.

Can CVE-2012-3328 be exploited remotely?

Yes, CVE-2012-3328 can be exploited remotely, allowing attackers to carry out cross-site scripting attacks.

What is the impact of CVE-2012-3328 on users?

The impact of CVE-2012-3328 can include unauthorized access to sensitive information and potential session hijacking for affected users.