CVE-2012-0195

Published: Mar 13, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via the display name.

Affected (15)

Products: Ibm: Maximo Asset Management, Maximo Asset Management Essentials, Tivoli Asset Management For It, Trivoli Service Request Manager, Maximo Service Desk, Tivoli Change And Configuration Management Database

Ibm

6 products

Maximo Asset Management

Maximo Asset Management Essentials

Tivoli Asset Management For It

Trivoli Service Request Manager

Maximo Service Desk

Tivoli Change And Configuration Management Database

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 6.2
Ibm Maximo Asset Management	Version 7.1
Ibm Maximo Asset Management	Version 7.5

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management Essentials	Version 6.2
Ibm Maximo Asset Management Essentials	Version 7.1
Ibm Maximo Asset Management Essentials	Version 7.5

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Asset Management For It	Version 6.2
Ibm Tivoli Asset Management For It	Version 7.1
Ibm Tivoli Asset Management For It	Version 7.2

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Trivoli Service Request Manager	Version 7.1
Ibm Trivoli Service Request Manager	Version 7.2

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Service Desk	Version 6.2

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Change And Configuration Management Database	Version 6.2
Ibm Tivoli Change And Configuration Management Database	Version 7.1
Ibm Tivoli Change And Configuration Management Database	Version 7.2