← CVE Intelligence

CVE-2016-5902

IBM Corporation / IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.10, 7.1.0.0, 6.2.0.0, 7.2, 7.1.1, 7.1.2, 7.2.1, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 7.1.1.1, 7.1.1.10, 7.1.1.11, 7.1.1.12, 7.1.1.2, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.6, 7.5.0, 7.6.0 PUBLISHED

Description (CNA)

IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (CNA)

Vendor / productVersions
IBM Corporation / IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.10, 7.1.0.0, 6.2.0.0, 7.2, 7.1.1, 7.1.2, 7.2.1, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 7.1.1.1, 7.1.1.10, 7.1.1.11, 7.1.1.12, 7.1.1.2, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.6, 7.5.0, 7.6.0affected IBM Maximo Asset Management 6.2, 7.1, 7.5, 7.5.0.0, 7.5.0.10, 7.1.0.0, 6.2.0.0, 7.2, 7.1.1, 7.1.2, 7.2.1, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 7.1.1.1, 7.1.1.10, 7.1.1.11, 7.1.1.12, 7..10; affected 7.1.0.0; affected 6.2.0.0; affected 7.2; affected 7.1.1; affected 7.1.2; affected 7.2.1; affected 6.2.1; affected 6.2.2; affected 6.2.3; affected 6.2.4; affected 6.2.5; affected 6.2.6; affected 6.2.7; affected 6.2.8; affected 7.1.1.1; affected 7.1.1.10; affected 7.1.1.11; affected 7.1.1.12; affected 7.1.1.2; affected 7.1.1.5; affected 7.1.1.6; affected 7.1.1.7; affected 7.1.1.8; affected 7.1.1.9; affected 7.5.0.1; affected 7.5.0.2; affected 7.5.0.3; affected 7.5.0.4; affected 7.5.0.5; affected 7.6; affected 7.5.0; affected 7.6.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.