CVE-2015-7451
Severity Score
5.4
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Vulnerabilidad de XSS en IBM Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.9 IF2 y 7.6 en versiones anteriores a 7.6.0.3 FP3 y Maximo Asset Management 7.5 en versiones anteriores a 7.5.0.9 IF2, 7.5.1 y 7.6 en versiones anteriores a 7.6.0.3 FP3 para SmartCloud Control Desk permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de una URL manipulada.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-09-29 CVE Reserved
- 2016-01-02 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg21972423 | 2016-01-06 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.5 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.6 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Essentials Search vendor "Ibm" for product "Maximo Asset Management Essentials" | 7.5 Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Government Search vendor "Ibm" for product "Maximo For Government" | 7.5 Search vendor "Ibm" for product "Maximo For Government" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.5 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.6 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.5 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.5 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.5 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.5 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.5 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Smartcloud Control Desk Search vendor "Ibm" for product "Smartcloud Control Desk" | 7.6 Search vendor "Ibm" for product "Smartcloud Control Desk" and version "7.6" | - |
Affected
| ||||||