CVE-2018-1872

CVE-2018-1872 affects IBM Maximo Asset Management 7.6, with a cross-site scripting vulnerability in the Web UI that can allow an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. The vulnerability is documented across multiple sources (IBM X-For...