CVE-2016-0262: XSS

Published Mar 14, 2016

Updated

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected Software

18 affected components

IBM Maximo Asset Management=7.1.1

IBM Maximo Asset Management=7.1.1.1

IBM Maximo Asset Management=7.1.1.2

IBM Maximo Asset Management=7.1.1.3

IBM Maximo Asset Management=7.5.0.0

IBM Maximo Asset Management=7.5.0.1

IBM Maximo Asset Management=7.5.0.2

IBM Maximo Asset Management=7.5.0.3

IBM Maximo Asset Management=7.5.0.4

IBM Maximo Asset Management=7.5.0.5

IBM Maximo Asset Management=7.5.0.6

IBM Maximo Asset Management=7.5.0.7

IBM Maximo Asset Management=7.5.0.8

IBM Maximo Asset Management=7.5.0.9

IBM Maximo Asset Management=7.6.0.0

IBM Maximo Asset Management=7.6.0.1

IBM Maximo Asset Management=7.6.0.2

IBM Maximo Asset Management=7.6.0.3

Event History

Mar 14, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0262?

The severity of CVE-2016-0262 is classified as moderate due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2016-0262?

To fix CVE-2016-0262, upgrade IBM Maximo Asset Management to the latest patched version as per the vendor's guidance.

Which versions of IBM Maximo Asset Management are affected by CVE-2016-0262?

CVE-2016-0262 affects IBM Maximo Asset Management versions 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001.

What type of vulnerability is CVE-2016-0262?

CVE-2016-0262 is a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary web script or HTML.

Who is at risk from CVE-2016-0262?

Remote authenticated users of IBM Maximo Asset Management are at risk from CVE-2016-0262 due to the potential for malicious script execution.