1. Home
  2. CVE Database
  3. CVE-2012-3327
MEDIUM · 4.3

CVE-2012-3327

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Serv...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to a login action.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
IbmMaximo Asset Management6.2
IbmMaximo Asset Management Essentials6.2.0.0
IbmTivoli Asset Management For It6.0
IbmTivoli Service Request Manager7.1.0
IbmMaximo Service Desk6.2
IbmChange And Configuration Management Database7.1.
IbmSmartcloud Control Desk7.5.0.0

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2012-3327?

CVE-2012-3327 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Serv...

How severe is CVE-2012-3327?

CVE-2012-3327 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-3327?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Maximo Asset Management, Ibm Maximo Asset Management Essentials, Ibm Tivoli Asset Management For It, Ibm Tivoli Service Request Manager, Ibm Maximo Service Desk.