CVE-2011-1396

https://notcve.org/view.php?id=CVE-2011-1396

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en IBM Maximo Asset Management y Asset Management Essentials 6.2, 7.1, y 7.5. Permite a usuarios remotos inyectar codigo de script web o código HTML de su elección a través del parámetro reportType a un componente sin especificar. • http://secunia.com/advisories/48299 http://www-01.ibm.com/support/docview.wss?uid=swg1IV09190 http://www.ibm.com/support/docview.wss?uid=swg21584666 http://www.securityfocus.com/bid/52333 https://exchange.xforce.ibmcloud.com/vulnerabilities/71999 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •