CVE-2016-5902
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
- Score
- CVSS 3.0 6.1 Medium
- Status
- Modified - psirt@us.ibm.com
- Published
- 2017-02-08
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
- Maximo Asset Management (Ibm)
- Maximo For Aviation (Ibm)
- Maximo For Energy Optimization (Ibm)
- Maximo For Government (Ibm)
- Maximo For Life Sciences (Ibm)
- Maximo For Nuclear Power (Ibm)
- Maximo For Oil And Gas (Ibm)
- Maximo For Transportation (Ibm)
- Maximo For Utilities (Ibm)
- 6.2.0.0 (Ibm Corporation)
- 6.2.1 (Ibm Corporation)
- 6.2.2 (Ibm Corporation)
- 6.2.3 (Ibm Corporation)
- 6.2.4 (Ibm Corporation)
- 6.2.5 (Ibm Corporation)
- 6.2.6 (Ibm Corporation)
- 6.2.7 (Ibm Corporation)
- 6.2.8 (Ibm Corporation)
- 7.1 (Ibm Corporation)
- 7.1.0.0 (Ibm Corporation)
- 7.1.1 (Ibm Corporation)
- 7.1.1.1 (Ibm Corporation)
- 7.1.1.10 (Ibm Corporation)
- 7.1.1.11 (Ibm Corporation)
- 7.1.1.12 (Ibm Corporation)
- 7.1.1.2 (Ibm Corporation)
- 7.1.1.5 (Ibm Corporation)
- 7.1.1.6 (Ibm Corporation)
- 7.1.1.7 (Ibm Corporation)
- 7.1.1.8 (Ibm Corporation)
- 7.1.1.9 (Ibm Corporation)
- 7.1.2 (Ibm Corporation)
- 7.2 (Ibm Corporation)
- 7.2.1 (Ibm Corporation)
- 7.5 (Ibm Corporation)
- 7.5.0 (Ibm Corporation)
- 7.5.0.0 (Ibm Corporation)
- 7.5.0.1 (Ibm Corporation)
- 7.5.0.10 (Ibm Corporation)
- 7.5.0.2 (Ibm Corporation)
- 7.5.0.3 (Ibm Corporation)
- 7.5.0.4 (Ibm Corporation)
- 7.5.0.5 (Ibm Corporation)
- 7.6 (Ibm Corporation)
- 7.6.0 (Ibm Corporation)
- Ibm Maximo Asset Management 6.2 (Ibm Corporation)
References
- http://www.ibm.com/support/docview.wss?uid=swg21988252
- http://www.securityfocus.com/bid/92535
