CVE-2014-0824

Published: May 26, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via an attachment URL.

Affected (26)

Products: Ibm: Change And Configuration Management Database, Maximo Service Desk, Tivoli It Asset Management For It, Tivoli Service Request Manager, Maximo Asset Management

Ibm

5 products

Change And Configuration Management Database

Maximo Service Desk

Tivoli It Asset Management For It

Tivoli Service Request Manager

Maximo Asset Management

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Change And Configuration Management Database	Version 7.0
Ibm Change And Configuration Management Database	Version 7.1.1.12
Ibm Change And Configuration Management Database	Version 7.1.1.7
Ibm Change And Configuration Management Database	Version 7.1.1.8
Ibm Change And Configuration Management Database	Version 7.1
Ibm Maximo Service Desk	Version 7.1.1.12
Ibm Maximo Service Desk	Version 7.1.1.7
Ibm Maximo Service Desk	Version 7.1.1.8
Ibm Tivoli It Asset Management For It	Version 7.1.1.12
Ibm Tivoli It Asset Management For It	Version 7.1.1.7
Ibm Tivoli It Asset Management For It	Version 7.1.1.8
Ibm Tivoli Service Request Manager	Version 7.0
Ibm Tivoli Service Request Manager	Version 7.1.0
Ibm Tivoli Service Request Manager	Version 7.1.1.12
Ibm Tivoli Service Request Manager	Version 7.1.1.7
Ibm Tivoli Service Request Manager	Version 7.1.1.8
Ibm Tivoli Service Request Manager	Version 7.1.1

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.1.1.12
Ibm Maximo Asset Management	Version 7.1.1.1
Ibm Maximo Asset Management	Version 7.1.1.2
Ibm Maximo Asset Management	Version 7.1.1.5
Ibm Maximo Asset Management	Version 7.1.1.6
Ibm Maximo Asset Management	Version 7.1.1.7
Ibm Maximo Asset Management	Version 7.1.1.8
Ibm Maximo Asset Management	Version 7.1.1
Ibm Maximo Asset Management	Version 7.1