CVE-2012-3327 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2012-3327

Modified

More Info Official Page

Source-psirt@us.ibm.com

Published At-20 Feb, 2013 | 12:09

Updated At-29 Apr, 2026 | 01:13

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to a login action.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

IBM Corporation

>>maximo_asset_management>>6.2

cpe:2.3:a:ibm:maximo_asset_management:6.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.1

cpe:2.3:a:ibm:maximo_asset_management:6.2.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.2

cpe:2.3:a:ibm:maximo_asset_management:6.2.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.3

cpe:2.3:a:ibm:maximo_asset_management:6.2.3:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.4

cpe:2.3:a:ibm:maximo_asset_management:6.2.4:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.5

cpe:2.3:a:ibm:maximo_asset_management:6.2.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.6

cpe:2.3:a:ibm:maximo_asset_management:6.2.6:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.6.1

cpe:2.3:a:ibm:maximo_asset_management:6.2.6.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.7

cpe:2.3:a:ibm:maximo_asset_management:6.2.7:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>6.2.8

cpe:2.3:a:ibm:maximo_asset_management:6.2.8:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.2

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.5

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.6

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.7

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.8

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.9

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.10

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.1.1.11

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management>>7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>6.2.0.0

cpe:2.3:a:ibm:maximo_asset_management_essentials:6.2.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_asset_management_essentials>>7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>6.0

cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.0:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>6.2

cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.2:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>7.0

cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.0:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>7.1

cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_asset_management_for_it>>7.2

cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_service_request_manager>>7.1.0

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_service_request_manager>>7.1.0.0

cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.0:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_service_request_manager>>7.2.0.0

cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.0.0:*:*:*:*:*:*:*

IBM Corporation

>>maximo_service_desk>>6.2

cpe:2.3:a:ibm:maximo_service_desk:6.2:*:*:*:*:*:*:*

IBM Corporation

>>change_and_configuration_management_database>>7.1.

cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.:*:*:*:*:*:*:*

IBM Corporation

>>change_and_configuration_management_database>>7.2.0

cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0:*:*:*:*:*:*:*

IBM Corporation

>>smartcloud_control_desk>>7.5.0.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IV22698	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21625624	psirt@us.ibm.com	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78039	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1IV22698	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21625624	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/78039	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IV22698

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21625624

Source: psirt@us.ibm.com

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/78039

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1IV22698

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21625624

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/78039

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A