CVE

Id
68323  
CVE No.
CVE-2014-0914  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field.  
Phase
Assigned (20140106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
658221 68323 CVE-2014-0914 BUGTRAQ:20140811 IBM Maximo: Cross-site Scripting Vulnerability Addressed in Asset and Service Management (CVE-2014-0914 and -0915)  View
658222 68323 CVE-2014-0914 URL:http://www.securityfocus.com/archive/1/archive/1/533110/100/0/threaded  View
658223 68323 CVE-2014-0914 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21678885  View
658224 68323 CVE-2014-0914 AIXAPAR:IV56679  View
658225 68323 CVE-2014-0914 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV56679  View
658226 68323 CVE-2014-0914 BID:68839  View
658227 68323 CVE-2014-0914 URL:http://www.securityfocus.com/bid/68839  View
658228 68323 CVE-2014-0914 SECUNIA:59570  View
658229 68323 CVE-2014-0914 URL:http://secunia.com/advisories/59570  View
658230 68323 CVE-2014-0914 SECUNIA:59640  View
658231 68323 CVE-2014-0914 URL:http://secunia.com/advisories/59640  View
658232 68323 CVE-2014-0914 XF:ibm-maximo-cve20140914-xss(91883)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13259 JVNDB-2014-002134 IBM MessageSight におけるサービス運用妨害 (DoS) の脆弱性 IBM MessageSight には、サービス運用妨害 (リソース消費) 状態にされる脆弱性が存在します。 CVE-2014-0922 68323 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002134.html  View