Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2015-4961 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX003 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. |
| Link | Providers |
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21963973 |
|
No history.
Subscriptions
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2024-08-06T06:32:31.523Z
Reserved: 2015-06-24T00:00:00.000Z
Link: CVE-2015-4944
No data.
Status : Modified
Published: 2015-10-06T01:59:09.313
Modified: 2026-06-17T00:28:13.447
Link: CVE-2015-4944
No data.
OpenCVE Enrichment
No data.
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EUVD