CVE-2022-22436: XSS
IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224164.
Other sources
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-22436.
What is the severity of CVE-2022-22436?
The severity of CVE-2022-22436 is medium with a CVSS score of 5.4.
What is the affected software for CVE-2022-22436?
The affected software for CVE-2022-22436 is IBM Maximo Asset Management 7.6.1.2.
How does this vulnerability affect IBM Maximo Asset Management?
This vulnerability allows users to embed arbitrary JavaScript code in the Web UI of IBM Maximo Asset Management 7.6.1.2, potentially leading to credentials disclosure within a trusted session.
Is there a fix available for CVE-2022-22436?
Yes, IBM has provided a fix for CVE-2022-22436. Please refer to the official IBM support page for more information.