CVE-2024-45088: IBM Maximo Asset Management cross-site scripting
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Other sources
IBM Maximo Asset Management is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45088?
CVE-2024-45088 has a high severity rating due to its ability to allow stored cross-site scripting attacks.
How do I fix CVE-2024-45088?
To fix CVE-2024-45088, update IBM Maximo Asset Management to a version newer than 7.6.1.3 that addresses this vulnerability.
Who is affected by CVE-2024-45088?
CVE-2024-45088 affects users of IBM Maximo Asset Management version 7.6.1.3.
What type of attack can be executed through CVE-2024-45088?
CVE-2024-45088 allows authenticated users to execute stored cross-site scripting attacks, potentially compromising user credentials.
Is CVE-2024-45088 a remote or local vulnerability?
CVE-2024-45088 is a local vulnerability as it requires authentication to exploit.