What’s Vulnerable › Vulnerabilities

CVE-2017-1291

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-26 · updated 2026-06-17
• Weakness: CWE-79

Description

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 125152.

Affected products

• IBM Maximo Asset Management: 7.5, 7.6
• IBM Maximo Asset Management Essentials: 7.5

References

• http://www.ibm.com/support/docview.wss?uid=swg22003413
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125152
• http://www.ibm.com/support/docview.wss?uid=swg22003413
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125152

Get alerted when CVE-2017-1291 or the next vulnerability affects your stack