CVE-2016-9976

Published: May 3, 2017Modified: May 13, 2026

8.4

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: NVD

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252.

Affected (5)

Products: Ibm: Maximo Asset Management, Maximo Asset Management Essentials

Ibm

2 products

Maximo Asset Management

Maximo Asset Management Essentials

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Asset Management	Version 7.1
Ibm Maximo Asset Management	Version 7.5
Ibm Maximo Asset Management	Version 7.6
Ibm Maximo Asset Management Essentials	Version 7.1
Ibm Maximo Asset Management Essentials	Version 7.5