CVE-2017-1352

published 2017-09-12

CVE-2017-1352: IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that…

medium 5.5 CVSS 3.0

AV N AC L PR L UI R S U C L I L A L

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	maximo_asset_management	—	—
ibm	maximo_asset_management	—	—

CWE-77