CVE

Id
56565  
CVE No.
CVE-2012-3322  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a display name.  
Phase
Assigned (20120607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
585738 56565 CVE-2012-3322 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21625624  View
585739 56565 CVE-2012-3322 AIXAPAR:IV23838  View
585740 56565 CVE-2012-3322 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV23838  View
585741 56565 CVE-2012-3322 XF:mam-displayname-xss(77918)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30232 JVNDB-2012-005939 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 複数の IBM 製品には、login アクションに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3327 56565 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005939.html  View