Vulnerability Bulletins

IBM Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting, caused by improper validation of user-supplied input (CVE-2015-7451)

   
Affected software IBM
 
IBM Maximo Asset Management is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. CVE(s): CVE-2015-7451 Affected product(s) and affected version(s): 1. Maximo Asset Management 7.6, 7.5 2. Maximo Asset Management Essentials 7.5 3. Maximo for Government 7.5 4. Maximo for Nuclear Power 7.5 5. Maximo for Transportation 7.5 6. Maximo for Life Sciences 7.6, 7.5 7. Maximo for Oil and Gas 7.5 8. Maximo for Utilities 7.5 9. SmartCloud Control Desk 7.6, 7.5

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_maximo_asset_management_is_vulnerable_to_cross_site_scripting_caused_by_improper_validation_of_user_supplied_input_cve_2015_7451?lang=en_us