NVD

Id
85808  
Name
CVE-2017-1291  
Description
IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 125152.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-06-03  
Published
2017-05-26  
Modified Date
2017-05-31  
Seq
2017-1291  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67939 JVNDB-2017-004221 IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 IBM Maximo Asset Management には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-1291 0 CVE-2017-1291 85808 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004221.html 2017-05-23 2017-06-20 View