CVE

Id
56559  
CVE No.
CVE-2012-3316  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20120607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
585720 56559 CVE-2012-3316 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21625624  View
585721 56559 CVE-2012-3316 AIXAPAR:IV24609  View
585722 56559 CVE-2012-3316 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV24609  View
585723 56559 CVE-2012-3316 XF:mam-tpae-xss(77813)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30230 JVNDB-2012-005937 IBM SmartCloud Control Desk におけるアクセス制限を回避される脆弱性 IBM SmartCloud Control Desk には、アクセス制限を回避される脆弱性が存在します。 CVE-2012-3321 56559 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005937.html  View