medium5.5
CVE-2017-1352
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downl…
Impact
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Maximo Asset Management | Versions 7.5, 7.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22006650
- http://www.securityfocus.com/bid/100697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538
- http://www.ibm.com/support/docview.wss?uid=swg22006650
- http://www.securityfocus.com/bid/100697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538