CVE-2018-1872: XSS

Published Nov 7, 2018

Updated

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 151330.

Affected Software

1 affected component

IBM Maximo Asset Management=7.6

Remediation

Patch Available

https://www.ibm.com/support/docview.wss?uid=ibm10737461

Event History

Nov 9, 2018

CVE Published

04:29 PM

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-1872?

CVE-2018-1872 is classified as a medium severity vulnerability.

How do I fix CVE-2018-1872?

To fix CVE-2018-1872, you should apply the latest patches provided by IBM for Maximo Asset Management version 7.6.

What does CVE-2018-1872 exploit?

CVE-2018-1872 exploits a cross-site scripting (XSS) vulnerability that allows the embedding of arbitrary JavaScript code.

Who is affected by CVE-2018-1872?

Organizations using IBM Maximo Asset Management version 7.6 are affected by CVE-2018-1872.

What are the potential consequences of CVE-2018-1872?

The potential consequences of CVE-2018-1872 include the disclosure of credentials within a trusted session.