CVE-2016-5905

Published: Nov 30, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected (15)

Products: Ibm: Maximo Asset Management

Ibm

1 product

Maximo Asset Management

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.5.0.0
Ibm Maximo Asset Management	Version 7.5.0.1
Ibm Maximo Asset Management	Version 7.5.0.2
Ibm Maximo Asset Management	Version 7.5.0.3
Ibm Maximo Asset Management	Version 7.5.0.4
Ibm Maximo Asset Management	Version 7.5.0.5
Ibm Maximo Asset Management	Version 7.5.0.6
Ibm Maximo Asset Management	Version 7.5.0.7
Ibm Maximo Asset Management	Version 7.5.0.8
Ibm Maximo Asset Management	Version 7.5.0.9
Ibm Maximo Asset Management	Version 7.6.0.0
Ibm Maximo Asset Management	Version 7.6.0.1
Ibm Maximo Asset Management	Version 7.6.0.2
Ibm Maximo Asset Management	Version 7.6.0.3
Ibm Maximo Asset Management	Version 7.6.0.4