| Title | 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 |
|---|---|
| Summary | 複数の IBM 製品には、クロスサイトスクリプティングの脆弱性が存在します。 |
| Possible impacts | リモート認証されたユーザにより、任意の Web スクリプトまたは HTML を挿入される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Dec. 13, 2013, midnight |
| Registration Date | Dec. 19, 2013, 5:42 p.m. |
| Last Update | Dec. 19, 2013, 5:42 p.m. |
| CVSS2.0 : 注意 | |
| Score | 3.5 |
|---|---|
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
| IBM |
| IBM Maximo Asset Management 7.1.2 |
| IBM Maximo Asset Management 7.1.x から 7.1.1.12 |
| IBM Maximo Asset Management 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo Asset Management 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo Asset Management Essentials 7.1.2 |
| IBM Maximo Asset Management Essentials 7.1.x から 7.1.1.12 |
| IBM Maximo Asset Management Essentials 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo Asset Management Essentials 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo for Government 7.1.2 |
| IBM Maximo for Government 7.1.x から 7.1.1.12 |
| IBM Maximo for Government 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo for Government 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo for Life Sciences 7.1.2 |
| IBM Maximo for Life Sciences 7.1.x から 7.1.1.12 |
| IBM Maximo for Life Sciences 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo for Life Sciences 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo for Nuclear Power 7.1.2 |
| IBM Maximo for Nuclear Power 7.1.x から 7.1.1.12 |
| IBM Maximo for Nuclear Power 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo for Nuclear Power 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo for Oil and Gas 7.1.2 |
| IBM Maximo for Oil and Gas 7.1.x から 7.1.1.12 |
| IBM Maximo for Oil and Gas 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo for Oil and Gas 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo for Transportation 7.1.2 |
| IBM Maximo for Transportation 7.1.x から 7.1.1.12 |
| IBM Maximo for Transportation 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo for Transportation 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo for Utilities 7.1.2 |
| IBM Maximo for Utilities 7.1.x から 7.1.1.12 |
| IBM Maximo for Utilities 7.5.0.3 IFIX014 未満の 7.5 |
| IBM Maximo for Utilities 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| IBM Maximo Service Desk 7.1.2 |
| IBM Maximo Service Desk 7.1.x から 7.1.1.12 |
| IBM Maximo Service Desk 7.2.x から 7.2.1 |
| IBM SmartCloud Control Desk 7.5.0.3 IFIX014 未満の 7.5 |
| IBM SmartCloud Control Desk 7.5.0.5 IFIX003 未満の 7.5.0.5 |
| Tivoli Asset Management for IT 7.1.2 |
| Tivoli Asset Management for IT 7.1.x から 7.1.1.12 |
| Tivoli Asset Management for IT 7.2.x から 7.2.1 |
| Tivoli Change and Configuration Management Database 7.1.2 |
| Tivoli Change and Configuration Management Database 7.1.x から 7.1.1.12 |
| Tivoli Change and Configuration Management Database 7.2.x から 7.2.1 |
| Tivoli Service Request Manager 7.1.2 |
| Tivoli Service Request Manager 7.1.x から 7.1.1.12 |
| Tivoli Service Request Manager 7.2.x から 7.2.1 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2013年12月19日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities 7.1.x through 7.1.1.12, 7.1.2, 7.5 before 7.5.0.3 IFIX014, and 7.5.0.5 before IFIX003; SmartCloud Control Desk (SCCD) 7.5 before 7.5.0.3 IFIX014 and 7.5.0.5 before IFIX003; and Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.1.x through 7.1.1.12, 7.1.2, and 7.2.x through 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. |
|---|---|
| Publication Date | Dec. 19, 2013, 1:04 a.m. |
| Registration Date | Jan. 26, 2021, 3:45 p.m. |
| Last Update | Nov. 21, 2024, 10:57 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_nuclear_power:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_life_sciences:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.5:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_transportation:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_government:7.5.0.4:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_utilities:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:maximo_for_oil_and_gas:7.5.0.4:*:*:*:*:*:*:* | |||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.5:*:*:*:*:*:*:* | |||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:change_and_configuration_management_database:7.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2.0.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1.1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.1.12:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:tivoli_service_request_manager:7.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.2:*:*:*:*:*:*:* | |||||