Security Advisory

CVE-2021-20374

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-05-19 19:40:21
Last updated 2024-09-16 22:20:54
Assigner ibm
CVSS score 6.5
State PUBLISHED

Description

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195522.