CVE:CVE-2014-0914
CNNVD:CNNVD-201407-717
IBM Maximo Asset Management等都是美国IBM公司的产品。IBM Maximo Asset Management for SmartCloud Control Desk（SCCD）是一套用于资产和服务管理解决方案（SCCD）中的综合性资产生命周期和维护管理软件。Maximo Asset Management for Tivoli Asset Management for IT是一套IT资产管理解决方案。
多款IBM产品中存在跨站脚本漏洞，该漏洞源于程序未充分验证用户提供的输入。远程攻击者可通过‘Query Description’字段利用该漏洞注入任意Web脚本或HTML。以下产品版本受到影响：IBM Maximo Asset Management 6.2至6.2.8版本，6.x版本，7.x至7.5.0.6版本；IBM Maximo Asset Management for SCCD 7.5至7.5.0.3版本，7.5.1至7.5.1.2版本；Maximo Asset Management for Tivoli Asset Management for IT and Maximo Service Desk 6.2至6.2.8版本。
solution:Upgrade ibm maximo_asset_management to a higher version than 6.2,6.2.1,6.2.2,6.2.3,6.2.4,6.2.5,6.2.6,6.2.6.1,6.2.7,6.2.8,7.1,7.1.1,7.1.1.1,7.1.1.2,7.1.1.5,7.1.1.6,7.1.1.7,7.1.1.8,7.1.1.9,7.1.1.10,7.1.1.11,7.1.1.12,7.1.2,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,7.5.0.6,7.5.0.10,and avoid the version 6.2,6.2.1,6.2.2,6.2.3,6.2.4,6.2.5,6.2.6,6.2.6.1,6.2.7,6.2.8,7.1,7.1.1,7.1.1.1,7.1.1.2,7.1.1.5,7.1.1.6,7.1.1.7,7.1.1.8,7.1.1.9,7.1.1.10,7.1.1.11,7.1.1.12,7.1.2,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,7.5.0.6,7.5.0.10; Upgrade ibm maximo_asset_management_essentials to a higher version than 7.5.0.6,6.2.0.0,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],6.2.0.0,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_for_government to a higher version than 7.5.0.6,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_for_life_sciences to a higher version than 7.5.0.6,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_for_nuclear_power to a higher version than 7.5.0.6,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_for_oil_and_gas to a higher version than 7.5.0.6,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_for_transportation to a higher version than 7.5.0.6,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_for_utilities to a higher version than 7.5.0.6,7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,and avoid the version (,7.5.0.6],7.1,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5; Upgrade ibm maximo_service_desk to a higher version than 6.2.8,and avoid the version (,6.2.8]; Upgrade ibm smartcloud_control_desk to a higher version than 7.5.0.6,7.5,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.1.0,7.5.1.1,7.5.1.2,and avoid the version (,7.5.0.6],7.5,7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.1.0,7.5.1.1,7.5.1.2; Upgrade ibm tivoli_it_asset_management_for_it to a higher version than 6.2.8,and avoid the version (,6.2.8]