Home

CVE-2011-4818

Description

Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component.

Risk Information

Base Score
5.4
MODERATE
Vector
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.328

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Maximo Asset Management 6.2Windows
Multiple Vulnerabilities are affected in Maximo Asset Management 7.1Windows
Multiple Vulnerabilities are affected in Maximo Asset Management 7.5Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234