CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-6072

IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.5%

CVSS Severity

CVSS v3 Score 5.4

CVSS v2 Score 3.5

References

Products affected by CVE-2016-6072

Ibm » Maximo Asset Management » Version: 7.6.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0
Ibm » Maximo For Aviation » Version: N/A

cpe:2.3:a:ibm:maximo_for_aviation:-
Ibm » Maximo For Life Sciences » Version: N/A

cpe:2.3:a:ibm:maximo_for_life_sciences:-
Ibm » Maximo For Nuclear Power » Version: N/A

cpe:2.3:a:ibm:maximo_for_nuclear_power:-
Ibm » Maximo For Oil And Gas » Version: N/A

cpe:2.3:a:ibm:maximo_for_oil_and_gas:-
Ibm » Maximo For Transportation » Version: N/A

cpe:2.3:a:ibm:maximo_for_transportation:-
Ibm » Maximo For Utilities » Version: N/A

cpe:2.3:a:ibm:maximo_for_utilities:-
Ibm » Smartcloud Control Desk » Version: N/A

cpe:2.3:a:ibm:smartcloud_control_desk:-
Ibm » Tivoli Asset Management For It » Version: N/A

cpe:2.3:a:ibm:tivoli_asset_management_for_it:-
Ibm » Tivoli Change And Configuration Management Database » Version: N/A

cpe:2.3:a:ibm:tivoli_change_and_configuration_management_database:-
Ibm » Tivoli Integration Composer » Version: N/A

cpe:2.3:a:ibm:tivoli_integration_composer:-
Ibm » Tivoli Service Request Manager » Version: N/A

cpe:2.3:a:ibm:tivoli_service_request_manager:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-6072

Products

Pricing

Contact Us