CVE-2016-9976

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252.

Risk Information

Base Score

8.4

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.062

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Maximo Asset Management 7.1	Windows
Multiple Vulnerabilities are affected in Maximo Asset Management 7.5	Windows
Multiple Vulnerabilities are affected in Maximo Asset Management 7.6	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234