How severe is CVE-2021-20374?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Ibm Maximo Asset Management

CVE-2021-20374

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cred…

EPSS: 0.002 (35.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/UI:N/S:U/AV:N/I:L/PR:N/C:L/A:N/AC:L/RC:C/E:H/RL:O.

Affected products

Ibm Maximo Asset Management — versions 7.6.0, 7.6.1

References

www.ibm.com/support/pages/node/6454205 (x_refsource_CONFIRM)
ibm-maximo-cve202120374-xss (195522) (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2021-20374?: CVE-2021-20374 is a medium-severity vulnerability in Ibm Maximo Asset Management. CVSS score: 6.5/10. Published 2021-05-19.
How severe is CVE-2021-20374?: Medium severity. CVSS v3 base score is 6.5 out of 10.