5.4
Medium
CVE-2023-32332 IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection
Description
IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 255072.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Maximo Asset Management | Versions not published | |
| Maximo Application Suite | Versions not published |
Other CVEs of Maximo Asset Management
The 81 CVEs of Maximo Asset Management →
CVE-2025-2986
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting
5.5
Medium
CVE-2025-2987
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF)
3.8
Low
CVE-2024-45077
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows…
6.5
Medium
CVE-2024-45652
IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system
6.5
Medium