CVE-2013-0457

IBM Maximo Asset Management - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid.

References (3)

Scores

EPSS 0.0016
EPSS Percentile 36.8%

Details

CWE
CWE-79
Status published
Products (4)
ibm/maximo_asset_management
ibm/maximo_asset_management_essentials
ibm/smartcloud_control_desk
n/a/n/a
Published Feb 20, 2013
Tracked Since Feb 18, 2026