cbcvebase.
CVE-2019-4486
published 2019-10-24

CVE-2019-4486: IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 164070.

Affected

21 ranges
VendorProductVersion rangeFixed in
ibmmaximo_asset_management——
ibmmaximo_asset_management>= 7.6.0.0 < 7.6.0.107.6.0.10
ibmmaximo_asset_management>= 7.6.1.0 < 7.6.1.17.6.1.1
ibmmaximo_for_aviation——
ibmmaximo_for_aviation——
ibmmaximo_for_aviation——
ibmmaximo_for_aviation——
ibmmaximo_for_aviation——
ibmmaximo_for_life_sciences——
ibmmaximo_for_nuclear_power——
ibmmaximo_for_oil_and_gas——
ibmmaximo_for_transportation——
ibmmaximo_for_transportation——
ibmmaximo_for_transportation——
ibmmaximo_for_transportation——
ibmmaximo_for_transportation——
ibmmaximo_for_transportation——
ibmmaximo_for_utilities——
ibmsmartcloud_control_desk——
ibmsmartcloud_control_desk——
ibmtivoli_integration_composer——