CVE-2017-1208: IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM Maximo Asset Management versions 7.1, 7.5, 7.1.1, and 7.6 have a cross-site scripting issue in the web interface. A user could place JavaScript into the UI, changing what other trusted users see and potentially exposing credentials during an active session. Organizations still running IBM Maximo Asset Management 7.1, 7.5, 7.1.1, or 7.6 are the relevant exposure group. Risk is higher where the Maximo web UI is broadly reachable or used by many privileged operational staff. Prioritize remediation for exposed or business-critical Maximo environments, especially where administrators or operational teams use the web UI daily. This is not sourced as actively exploited, but credential exposure inside an enterprise asset system can create meaningful business risk. Mitigation focus: Review IBM support advisory swg22005243 for vendor-specific remediation guidance.; Upgrade or apply IBM-recommended fixes for affected Maximo versions where documented.; Restrict Maximo web UI access to trusted networks and required users..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.