Vulnerability Bulletins |
IBM Security Bulletin: Cross-site Scripting Vulnerability Addressed in Asset and Service Management (CVE-2014-0915) |
|
| Affected software | IBM |
|
Cross-site scripting security vulnerability on KPI display name field and various portlet fields in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Mgr, Change and Configuration Mgmt Database, and SmartCloud Control Desk. CVE(s): CVE-2014-0915 Affected product(s) and affected version(s): 1. Maximo Asset Management 7.5, 7.1, 6.2 2. Maximo Asset Management Essentials 7.5, 7.1, 6.2 3. Maximo for Government 7.5, 7.1, 6.2 4. Maximo for Nuclear Power 7.5, 7.1, 6.2, 6.3 5. More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_cross_site_scripting_vulnerability_addressed_in_asset_and_service_management_cve_2014_0915?lang=en_us |
|