medium5.4
CVE-2016-6072
IBM Maximo Asset Management is vulnerable to cross-site scripting.
Impact
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | Version 7.6.0.0 |
| Ibm | Maximo For Aviation | All versions |
| Ibm | Maximo For Life Sciences | All versions |
| Ibm | Maximo For Nuclear Power | All versions |
| Ibm | Maximo For Oil And Gas | All versions |
| Ibm | Maximo For Transportation | All versions |
| Ibm | Maximo For Utilities | All versions |
| Ibm | Smartcloud Control Desk | All versions |
| Ibm | Tivoli Asset Management For It | All versions |
| Ibm | Tivoli Change And Configuration Management Database | All versions |
| Ibm | Tivoli Integration Composer | All versions |
| Ibm | Tivoli Service Request Manager | All versions |