CVE-2013-4019: XSS
Published Oct 1, 2013
·Updated
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
21 affected components
IBM Maximo Asset Management=6.2
IBM Maximo Asset Management=6.2.1
IBM Maximo Asset Management=6.2.2
IBM Maximo Asset Management=6.2.3
IBM Maximo Asset Management=6.2.4
IBM Maximo Asset Management=6.2.5
IBM Maximo Asset Management=6.2.6
IBM Maximo Asset Management=6.2.6.1
IBM Maximo Asset Management=6.2.7
IBM Maximo Asset Management=6.2.8
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4019?
CVE-2013-4019 is classified as a medium severity Cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-4019?
To fix CVE-2013-4019, upgrade IBM Maximo Asset Management to version 7.1.1.12 or later.
3
Who is affected by CVE-2013-4019?
CVE-2013-4019 affects IBM Maximo Asset Management versions 6.2 through 6.2.8 and 7.1 before 7.1.1.12.
4
What is the impact of exploiting CVE-2013-4019?
Exploiting CVE-2013-4019 allows remote authenticated users to inject arbitrary web scripts or HTML into the application.
5
Is CVE-2013-4019 easy to exploit?
The exploitation of CVE-2013-4019 may vary in difficulty based on the attacker's knowledge of the application and its configurations.