Vulnerability Database

309,540

Total vulnerabilities in the database

CVE-2012-3316

Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • Published: Feb 20, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-3316
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / maximo_asset_management 7.1.1.5 7.1.1.5.x
ibm / maximo_asset_management 6.2.6.1 6.2.6.1.x
ibm / maximo_asset_management 7.1.1.7 7.1.1.7.x
ibm / maximo_asset_management 6.2.5 6.2.5.x
ibm / maximo_asset_management 7.1.1.10 7.1.1.10.x
ibm / maximo_asset_management 6.2.4 6.2.4.x
ibm / maximo_asset_management 7.1.1.8 7.1.1.8.x
ibm / maximo_asset_management 7.1.1.9 7.1.1.9.x
ibm / maximo_asset_management 6.2.2 6.2.2.x
ibm / maximo_asset_management 7.1.1.2 7.1.1.2.x
ibm / maximo_asset_management 6.2.6 6.2.6.x
ibm / maximo_asset_management 6.2.8 6.2.8.x
ibm / maximo_asset_management 6.2.3 6.2.3.x
ibm / maximo_asset_management 7.1.1.11 7.1.1.11.x
ibm / maximo_asset_management 6.2 6.2.x
ibm / maximo_asset_management 7.1.1.6 7.1.1.6.x
ibm / maximo_asset_management 6.2.1 6.2.1.x
ibm / maximo_asset_management 7.5.0.0 7.5.0.0.x
ibm / maximo_asset_management 6.2.7 6.2.7.x
ibm / maximo_asset_management 7.1.1 7.1.1.x
ibm / maximo_asset_management 7.1.1.1 7.1.1.1.x
ibm / maximo_asset_management_essentials 6.2.0.0 6.2.0.0.x
ibm / maximo_asset_management_essentials 7.5.0.0 7.5.0.0.x
ibm / tivoli_asset_management_for_it 7.0 7.0.x
ibm / tivoli_asset_management_for_it 7.2 7.2.x
ibm / tivoli_asset_management_for_it 7.1 7.1.x
ibm / tivoli_asset_management_for_it 6.2 6.2.x
ibm / tivoli_asset_management_for_it 6.0 6.0.x
ibm / tivoli_service_request_manager 7.1.0 7.1.0.x
ibm / tivoli_service_request_manager 7.2.0.0 7.2.0.0.x
ibm / tivoli_service_request_manager 7.1.0.0 7.1.0.0.x
ibm / maximo_service_desk 6.2 6.2.x
ibm / change_and_configuration_management_database 7.1 7.1.x
ibm / change_and_configuration_management_database 7.2.0 7.2.0.x
ibm / smartcloud_control_desk 7.5.0.0 7.5.0.0.x