Vulnerabilities > IBM > Maximo Asset Management Essentials > 6.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-03-13 | CVE-2011-1396 | Cross-Site Scripting vulnerability in IBM products Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component. | 4.3 |
2012-03-13 | CVE-2011-1395 | Cross-Site Scripting vulnerability in IBM products Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the controlid parameter. | 4.3 |
2012-03-13 | CVE-2011-1394 | Resource Management Errors vulnerability in IBM products IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session. | 5.0 |