cbcvebase.
CVE-2023-32332
published 2023-09-08

CVE-2023-32332: IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject…

medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 255072.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmmaximo_application_suite
ibmmaximo_application_suite
ibmmaximo_application_suite
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management