CVE-2016-5896

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
IBM Corporation	Maximo Asset Management	6.2; 7.1; 7.5; 7.5.0.0; 7.5.0.10; 7.1.0.0; 6.2.0.0; 7.2; 7.1.1; 7.1.2; 7.2.1; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; 6.2.6; 6.2.7; 6.2.8; 7.1.1.1

References

http://www.ibm.com/support/docview.wss?uid=swg21987855Patch, Vendor Advisory
http://www.securityfocus.com/bid/93872Third Party Advisory, VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg21987855Patch, Vendor Advisory
http://www.securityfocus.com/bid/93872Third Party Advisory, VDB Entry

Timeline

Published: Feb 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-58975.4IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, wou CVE-2016-58984.3IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization CVE-2016-58995.4IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i CVE-2016-59005.9IBM Tealeaf Customer Experience on Cloud Network Capture Add-On could allow a remote attacker to obtain sensitive information, caused by the CVE-2016-59015.4Cross-site scripting (XSS) vulnerability in a test page in IBM Business Process Manager Advanced 8.5.6.0 through 8.5.7.0 before cumulative f CVE-2016-59026.1IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the CVE-2016-59055.4Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote aut CVE-2016-59184.7IBM Tivoli Storage Manager HSM for Windows displays the encrypted Tivoli Storage Manager password in application trace output if the passwor CVE-2016-59197.5IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker CVE-2016-59205.4Cross-site scripting (XSS) vulnerability in the Web UI in IBM Financial Transaction Manager (FTM) for ACH Services 3.0.0.x before fp0015 and CVE-2016-59275.5IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and CVE-2016-59325.4IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript