CVE-2016-5905

IBM Maximo Asset Management is affected by CVE-2016-5905: cross-site scripting in the Maximo Asset Management core product (versions 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2). The vulnerability allows remote authenticated users to inject arbitrary web script or HTML via unspecified vect...