1. Home
  2. CVE Database
  3. CVE-2012-3316
LOW · 3.5

CVE-2012-3316

Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS Score

3.5

LOW

AV:N/AC:M/Au:S/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
IbmMaximo Asset Management6.2
IbmMaximo Asset Management Essentials6.2.0.0
IbmTivoli Asset Management For It6.0
IbmTivoli Service Request Manager7.1.0
IbmMaximo Service Desk6.2
IbmChange And Configuration Management Database7.1
IbmSmartcloud Control Desk7.5.0.0

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2012-3316?

CVE-2012-3316 is a vulnerability with a CVSS score of 3.5 (LOW). Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset...

How severe is CVE-2012-3316?

CVE-2012-3316 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-3316?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Maximo Asset Management, Ibm Maximo Asset Management Essentials, Ibm Tivoli Asset Management For It, Ibm Tivoli Service Request Manager, Ibm Maximo Service Desk.