CVE-2018-1584: XSS

Published Nov 26, 2018

Updated

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143497.

Affected Software

1 affected component

IBM Maximo Asset Management=7.6

Remediation

Patch Available

https://www.ibm.com/support/docview.wss?uid=ibm10741821

Event History

Nov 28, 2018

CVE Published

04:29 PM

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1584?

CVE-2018-1584 has a medium severity level due to its potential for credential disclosure through cross-site scripting.

How do I fix CVE-2018-1584?

To fix CVE-2018-1584, apply the latest security patches released by IBM for Maximo Asset Management 7.6.

What impact does CVE-2018-1584 have on users?

CVE-2018-1584 allows attackers to inject malicious JavaScript in the application, potentially leading to unauthorized access to user credentials.

Is CVE-2018-1584 specific to IBM Maximo Asset Management?

Yes, CVE-2018-1584 specifically affects IBM Maximo Asset Management version 7.6.

Can CVE-2018-1584 be exploited remotely?

Yes, CVE-2018-1584 can be exploited remotely by targeting users within a trusted session.