CVE-2020-4223: XSS
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 175121.
Other sources
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4223?
CVE-2020-4223 is classified as a medium severity vulnerability affecting IBM Maximo Asset Management due to cross-site scripting risks.
How do I fix CVE-2020-4223?
To remediate CVE-2020-4223, users should apply the latest patches provided by IBM for affected versions of Maximo Asset Management.
What versions of IBM Maximo Asset Management are affected by CVE-2020-4223?
CVE-2020-4223 affects IBM Maximo Asset Management versions 7.6.0.10 and 7.6.1.1.
What type of vulnerability is CVE-2020-4223?
CVE-2020-4223 is a cross-site scripting vulnerability that allows injection of arbitrary JavaScript code in the Web UI.
What could be the impact of exploiting CVE-2020-4223?
Exploitation of CVE-2020-4223 could potentially lead to credential disclosure within a trusted session.