Skip to content
OpenAdvisories
Unscored CVE-2017-1208 EUVD-2017-10224GHSA-c2wp-rx8j-v5r4

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

Published Jul 5, 2017 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Maximo Asset Management

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123778.

Affected products

VendorProductAffectedFixed
IBM Maximo Asset Management 7.1, 7.5, 7.1.1, 7.6 —

References