CVE-2018-1686: XSS
IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145505.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1686?
CVE-2018-1686 is considered a high severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2018-1686?
To mitigate CVE-2018-1686, update IBM Maximo Asset Management to version 7.6.4 or later.
What types of systems are affected by CVE-2018-1686?
CVE-2018-1686 affects IBM Maximo Asset Management versions 7.6 through 7.6.3.
What is cross-site scripting in the context of CVE-2018-1686?
In the context of CVE-2018-1686, cross-site scripting allows attackers to inject malicious JavaScript into the web UI.
What are the potential impacts of CVE-2018-1686?
The potential impacts of CVE-2018-1686 include unauthorized access to sensitive data and possible credential disclosure.