CVE-2014-0893

Published: May 26, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.

Affected (15)

Products: Ibm: Maximo Asset Management, Smartcloud Control Desk

Ibm

2 products

Maximo Asset Management

Smartcloud Control Desk

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.5.0.0
Ibm Maximo Asset Management	Version 7.5.0.1
Ibm Maximo Asset Management	Version 7.5.0.2
Ibm Maximo Asset Management	Version 7.5.0.3
Ibm Maximo Asset Management	Version 7.5.0.4
Ibm Maximo Asset Management	Version 7.5.0.5

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Smartcloud Control Desk	Version 7.0
Ibm Smartcloud Control Desk	Version 7.5.0.0
Ibm Smartcloud Control Desk	Version 7.5.0.1
Ibm Smartcloud Control Desk	Version 7.5.0.2
Ibm Smartcloud Control Desk	Version 7.5.0.3
Ibm Smartcloud Control Desk	Version 7.5.0.5
Ibm Smartcloud Control Desk	Version 7.5.1.0
Ibm Smartcloud Control Desk	Version 7.5.1.1
Ibm Smartcloud Control Desk	Version 7.5