CVE-2017-1291

IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 125152.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22003413Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125152Patch, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22003413Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125152Patch, Vendor Advisory

Published

May 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12904Improper Neutralization of Special Elements used in an OS Co…
• CVE-2017-12905Server Side Request Forgery vulnerability in Vebto Pixie Ima…10
• CVE-2017-12906Multiple cross-site scripting (XSS) vulnerabilities in Nexus…
• CVE-2017-12907Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 v…
• CVE-2017-12908SQL injection vulnerability in takeconfirm.php in NexusPHP 1…
• CVE-2017-12909SQL injection vulnerability in modtask.php in NexusPHP 1.5 a…
• CVE-2017-12910SQL injection vulnerability in massmail.php in NexusPHP 1.5 …
• CVE-2017-12911The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability …
• CVE-2017-12912The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vuln…
• CVE-2017-12919Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in ol…
• CVE-2017-1292IBM Maximo Asset Management 7.5 and 7.6 generates error mess…
• CVE-2017-12920CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows…