CVE-2016-6072

Published: Feb 1, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected (12)

Products: Ibm: Maximo Asset Management, Maximo For Aviation, Maximo For Life Sciences, Maximo For Nuclear Power, Maximo For Oil And Gas, Maximo For Transportation, Maximo For Utilities, Smartcloud Control Desk, Tivoli Asset Management For It, Tivoli Change And Configuration Management Database, Tivoli Integration Composer, Tivoli Service Request Manager

Ibm

12 products

Maximo Asset Management

Maximo For Aviation

Maximo For Life Sciences

Maximo For Nuclear Power

Maximo For Oil And Gas

Maximo For Transportation

Maximo For Utilities

Smartcloud Control Desk

Tivoli Asset Management For It

Tivoli Change And Configuration Management Database

Tivoli Integration Composer

Tivoli Service Request Manager

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.6.0.0
Ibm Maximo For Aviation	All versions
Ibm Maximo For Life Sciences	All versions
Ibm Maximo For Nuclear Power	All versions
Ibm Maximo For Oil And Gas	All versions
Ibm Maximo For Transportation	All versions
Ibm Maximo For Utilities	All versions
Ibm Smartcloud Control Desk	All versions
Ibm Tivoli Asset Management For It	All versions
Ibm Tivoli Change And Configuration Management Database	All versions
Ibm Tivoli Integration Composer	All versions
Ibm Tivoli Service Request Manager	All versions