NVD

Id
31301  
Name
CVE-2014-3025  
Description
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via unspecified input to a .jsp file under webclient/utility/.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-07-30  
Modified Date
2017-01-06  
Seq
2014-3025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163951 31301 CVE-2014-3025 59570  View
163952 31301 CVE-2014-3025 59640  View
163953 31301 CVE-2014-3025 IV57241  View
163954 31301 CVE-2014-3025 http://www-01.ibm.com/support/docview.wss?uid=swg21678754  View
163955 31301 CVE-2014-3025 ibm-maximo-cve20143025-xss(93064)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14775 JVNDB-2014-003650 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 IBM Maximo Asset Management、SmartCloud Control Desk、Tivoli Asset Management for IT、およびその他の特定の製品には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3025 70312 CVE-2014-3025 31301 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003650.html 2014-07-11 2014-08-01 View