CVE-2015-4944

EPSS 0.78%
Veröffentlicht 06.10.2015 01:59:09
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX003 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 81 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Change And Configuration Management Database Version 7.1

Ibm ≫ Change And Configuration Management Database Version 7.2

Ibm ≫ Maximo Asset Management Version 7.1

Ibm ≫ Maximo Asset Management Version 7.1.1

Ibm ≫ Maximo Asset Management Version 7.1.1.1

Ibm ≫ Maximo Asset Management Version 7.1.1.2

Ibm ≫ Maximo Asset Management Version 7.1.1.5

Ibm ≫ Maximo Asset Management Version 7.1.1.6

Ibm ≫ Maximo Asset Management Version 7.1.1.7

Ibm ≫ Maximo Asset Management Version 7.1.1.8

Ibm ≫ Maximo Asset Management Version 7.1.1.9

Ibm ≫ Maximo Asset Management Version 7.1.1.10

Ibm ≫ Maximo Asset Management Version 7.1.1.11

Ibm ≫ Maximo Asset Management Version 7.1.1.12

Ibm ≫ Maximo Asset Management Version 7.1.1.13

Ibm ≫ Maximo Asset Management Version 7.5.0.0

Ibm ≫ Maximo Asset Management Version 7.5.0.1

Ibm ≫ Maximo Asset Management Version 7.5.0.2

Ibm ≫ Maximo Asset Management Version 7.5.0.3

Ibm ≫ Maximo Asset Management Version 7.5.0.4

Ibm ≫ Maximo Asset Management Version 7.5.0.5

Ibm ≫ Maximo Asset Management Version 7.5.0.6

Ibm ≫ Maximo Asset Management Version 7.5.0.7

Ibm ≫ Maximo Asset Management Version 7.5.0.8

Ibm ≫ Maximo Asset Management Version 7.6.0.0

Ibm ≫ Maximo Asset Management Essentials Version 7.1

Ibm ≫ Maximo Asset Management Essentials Version 7.5

Ibm ≫ Maximo For Energy Optimization Version 7.1

Ibm ≫ Maximo For Government Version 7.1

Ibm ≫ Maximo For Government Version 7.5.0.0

Ibm ≫ Maximo For Government Version 7.5.0.1

Ibm ≫ Maximo For Government Version 7.5.0.2

Ibm ≫ Maximo For Government Version 7.5.0.3

Ibm ≫ Maximo For Government Version 7.5.0.4

Ibm ≫ Maximo For Government Version 7.5.0.5

Ibm ≫ Maximo For Government Version 7.5.0.6

Ibm ≫ Maximo For Life Sciences Version 7.1

Ibm ≫ Maximo For Life Sciences Version 7.5.0.0

Ibm ≫ Maximo For Life Sciences Version 7.5.0.1

Ibm ≫ Maximo For Life Sciences Version 7.5.0.2

Ibm ≫ Maximo For Life Sciences Version 7.5.0.3

Ibm ≫ Maximo For Life Sciences Version 7.5.0.4

Ibm ≫ Maximo For Life Sciences Version 7.5.0.5

Ibm ≫ Maximo For Life Sciences Version 7.5.0.6

Ibm ≫ Maximo For Nuclear Power Version 7.1

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.0

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.1

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.2

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.3

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.4

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.5

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.6

Ibm ≫ Maximo For Oil And Gas Version 7.1

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.0

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.1

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.2

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.3

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.4

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.5

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.6

Ibm ≫ Maximo For Transportation Version 7.1

Ibm ≫ Maximo For Transportation Version 7.5.0.0

Ibm ≫ Maximo For Transportation Version 7.5.0.1

Ibm ≫ Maximo For Transportation Version 7.5.0.2

Ibm ≫ Maximo For Transportation Version 7.5.0.3

Ibm ≫ Maximo For Transportation Version 7.5.0.4

Ibm ≫ Maximo For Transportation Version 7.5.0.5

Ibm ≫ Maximo For Transportation Version 7.5.0.6

Ibm ≫ Maximo For Utilities Version 7.1

Ibm ≫ Maximo For Utilities Version 7.5.0.0

Ibm ≫ Maximo For Utilities Version 7.5.0.1

Ibm ≫ Maximo For Utilities Version 7.5.0.2

Ibm ≫ Maximo For Utilities Version 7.5.0.3

Ibm ≫ Maximo For Utilities Version 7.5.0.4

Ibm ≫ Maximo For Utilities Version 7.5.0.5

Ibm ≫ Maximo For Utilities Version 7.5.0.6

Ibm ≫ Smartcloud Control Desk Version 7.5

Ibm ≫ Tivoli Asset Management For It Version 7.1

Ibm ≫ Tivoli Asset Management For It Version 7.2

Ibm ≫ Tivoli Service Request Manager Version 7.1.0

Ibm ≫ Tivoli Service Request Manager Version 7.2.0.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.78%	0.512

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www-01.ibm.com/support/docview.wss?uid=swg21963973

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-4944

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-4944

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-4944

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-4944