CVE-2019-4749
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173308.
IBM Maximo Asset Management versión 7.6, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista, conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable. IBM X-Force ID: 173308.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-03 CVE Reserved
- 2020-04-17 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.ibm.com/support/pages/node/6193479 | 2020-04-21 |
| URL | Date | SRC |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/173308 | 2020-04-21 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Control Desk Search vendor "Ibm" for product "Control Desk" | 7.6.1 Search vendor "Ibm" for product "Control Desk" and version "7.6.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Control Desk Search vendor "Ibm" for product "Control Desk" | 7.6.1.1 Search vendor "Ibm" for product "Control Desk" and version "7.6.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Configuration Manager Search vendor "Ibm" for product "Maximo Asset Configuration Manager" | 7.6.6 Search vendor "Ibm" for product "Maximo Asset Configuration Manager" and version "7.6.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Configuration Manager Search vendor "Ibm" for product "Maximo Asset Configuration Manager" | 7.6.7 Search vendor "Ibm" for product "Maximo Asset Configuration Manager" and version "7.6.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Configuration Manager Search vendor "Ibm" for product "Maximo Asset Configuration Manager" | 7.6.7.1 Search vendor "Ibm" for product "Maximo Asset Configuration Manager" and version "7.6.7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Health Insights Search vendor "Ibm" for product "Maximo Asset Health Insights" | 7.6.1 Search vendor "Ibm" for product "Maximo Asset Health Insights" and version "7.6.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Health Insights Search vendor "Ibm" for product "Maximo Asset Health Insights" | 7.6.1.1 Search vendor "Ibm" for product "Maximo Asset Health Insights" and version "7.6.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Search vendor "Ibm" for product "Maximo Asset Management" | 7.6.1.1 Search vendor "Ibm" for product "Maximo Asset Management" and version "7.6.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Scheduler Search vendor "Ibm" for product "Maximo Asset Management Scheduler" | 7.6.7 Search vendor "Ibm" for product "Maximo Asset Management Scheduler" and version "7.6.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Scheduler Search vendor "Ibm" for product "Maximo Asset Management Scheduler" | 7.6.7.1 Search vendor "Ibm" for product "Maximo Asset Management Scheduler" and version "7.6.7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Scheduler Search vendor "Ibm" for product "Maximo Asset Management Scheduler" | 7.6.7.3 Search vendor "Ibm" for product "Maximo Asset Management Scheduler" and version "7.6.7.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Scheduler Plus Search vendor "Ibm" for product "Maximo Asset Management Scheduler Plus" | 7.6.7 Search vendor "Ibm" for product "Maximo Asset Management Scheduler Plus" and version "7.6.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Scheduler Plus Search vendor "Ibm" for product "Maximo Asset Management Scheduler Plus" | 7.6.7.1 Search vendor "Ibm" for product "Maximo Asset Management Scheduler Plus" and version "7.6.7.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Asset Management Scheduler Plus Search vendor "Ibm" for product "Maximo Asset Management Scheduler Plus" | 7.6.7.3 Search vendor "Ibm" for product "Maximo Asset Management Scheduler Plus" and version "7.6.7.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Calibration Search vendor "Ibm" for product "Maximo Calibration" | 7.6 Search vendor "Ibm" for product "Maximo Calibration" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Enterprise Adapter Search vendor "Ibm" for product "Maximo Enterprise Adapter" | 7.6 Search vendor "Ibm" for product "Maximo Enterprise Adapter" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Enterprise Adapter Search vendor "Ibm" for product "Maximo Enterprise Adapter" | 7.6.1 Search vendor "Ibm" for product "Maximo Enterprise Adapter" and version "7.6.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Equipment Maintenance Assistant Search vendor "Ibm" for product "Maximo Equipment Maintenance Assistant" | - | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Aviation Search vendor "Ibm" for product "Maximo For Aviation" | 7.6.6 Search vendor "Ibm" for product "Maximo For Aviation" and version "7.6.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Aviation Search vendor "Ibm" for product "Maximo For Aviation" | 7.6.7 Search vendor "Ibm" for product "Maximo For Aviation" and version "7.6.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Aviation Search vendor "Ibm" for product "Maximo For Aviation" | 7.6.8 Search vendor "Ibm" for product "Maximo For Aviation" and version "7.6.8" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Life Sciences Search vendor "Ibm" for product "Maximo For Life Sciences" | 7.6 Search vendor "Ibm" for product "Maximo For Life Sciences" and version "7.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Nuclear Power Search vendor "Ibm" for product "Maximo For Nuclear Power" | 7.6.1 Search vendor "Ibm" for product "Maximo For Nuclear Power" and version "7.6.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Oil And Gas Search vendor "Ibm" for product "Maximo For Oil And Gas" | 7.6.1 Search vendor "Ibm" for product "Maximo For Oil And Gas" and version "7.6.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Service Providers Search vendor "Ibm" for product "Maximo For Service Providers" | 7.6.3.1 Search vendor "Ibm" for product "Maximo For Service Providers" and version "7.6.3.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Service Providers Search vendor "Ibm" for product "Maximo For Service Providers" | 7.6.3.2 Search vendor "Ibm" for product "Maximo For Service Providers" and version "7.6.3.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Service Providers Search vendor "Ibm" for product "Maximo For Service Providers" | 7.6.3.3 Search vendor "Ibm" for product "Maximo For Service Providers" and version "7.6.3.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.6.2.3 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.6.2.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.6.2.4 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.6.2.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Transportation Search vendor "Ibm" for product "Maximo For Transportation" | 7.6.2.5 Search vendor "Ibm" for product "Maximo For Transportation" and version "7.6.2.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.6.0.1 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.6.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo For Utilities Search vendor "Ibm" for product "Maximo For Utilities" | 7.6.0.2 Search vendor "Ibm" for product "Maximo For Utilities" and version "7.6.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Linear Asset Manager Search vendor "Ibm" for product "Maximo Linear Asset Manager" | 7.6.0.1 Search vendor "Ibm" for product "Maximo Linear Asset Manager" and version "7.6.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Linear Asset Manager Search vendor "Ibm" for product "Maximo Linear Asset Manager" | 7.6.0.2 Search vendor "Ibm" for product "Maximo Linear Asset Manager" and version "7.6.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Linear Asset Manager Search vendor "Ibm" for product "Maximo Linear Asset Manager" | 7.6.0.3 Search vendor "Ibm" for product "Maximo Linear Asset Manager" and version "7.6.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Network On Blockchain Search vendor "Ibm" for product "Maximo Network On Blockchain" | 7.6.0.0 Search vendor "Ibm" for product "Maximo Network On Blockchain" and version "7.6.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Network On Blockchain Search vendor "Ibm" for product "Maximo Network On Blockchain" | 7.6.0.1 Search vendor "Ibm" for product "Maximo Network On Blockchain" and version "7.6.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Spatial Asset Management Search vendor "Ibm" for product "Maximo Spatial Asset Management" | 7.6.0.2 Search vendor "Ibm" for product "Maximo Spatial Asset Management" and version "7.6.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Spatial Asset Management Search vendor "Ibm" for product "Maximo Spatial Asset Management" | 7.6.0.3 Search vendor "Ibm" for product "Maximo Spatial Asset Management" and version "7.6.0.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Spatial Asset Management Search vendor "Ibm" for product "Maximo Spatial Asset Management" | 7.6.0.4 Search vendor "Ibm" for product "Maximo Spatial Asset Management" and version "7.6.0.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Maximo Spatial Asset Management Search vendor "Ibm" for product "Maximo Spatial Asset Management" | 7.6.0.5 Search vendor "Ibm" for product "Maximo Spatial Asset Management" and version "7.6.0.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Integration Composer Search vendor "Ibm" for product "Tivoli Integration Composer" | 7.6.0.1 Search vendor "Ibm" for product "Tivoli Integration Composer" and version "7.6.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Integration Composer Search vendor "Ibm" for product "Tivoli Integration Composer" | 7.6.0.2 Search vendor "Ibm" for product "Tivoli Integration Composer" and version "7.6.0.2" | - |
Affected
| ||||||