CVE-2013-0457

Published: Feb 20, 2013Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid.

Affected (3)

Products: Ibm: Maximo Asset Management, Maximo Asset Management Essentials, Smartcloud Control Desk

3 products

Maximo Asset Management

Maximo Asset Management Essentials

Smartcloud Control Desk

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.5.0.0
Ibm Maximo Asset Management Essentials	Version 7.5.0.0
Ibm Smartcloud Control Desk	Version 7.5.0.0

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (6)

http://www-01.ibm.com/support/docview.wss?uid=swg1IV20590

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21625624

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/81011

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1IV20590

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21625624

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/81011

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.