CVE

Id
56571  
CVE No.
CVE-2012-3328  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.  
Phase
Assigned (20120607)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
585778 56571 CVE-2012-3328 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21625624  View
585779 56571 CVE-2012-3328 AIXAPAR:IV20823  View
585780 56571 CVE-2012-3328 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV20823  View
585781 56571 CVE-2012-3328 XF:mam-hiddenframefooter-xss(78040)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30510 JVNDB-2012-006218 IBM Maximo Asset Management および SmartCloud Control Desk における CRLF インジェクションの脆弱性 IBM Maximo Asset Management および SmartCloud Control Desk には、CRLF インジェクションの脆弱性が存在します。 CVE-2012-3333 56571 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006218.html  View