MA
Product
Maximo Asset Management
182
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 24Medium 70Low 4
Watch
Add Maximo Asset Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22436 | 5.4 | Apr 21 | IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting Affected: 7.6.1.2 |
| CVE-2022-22435 | 5.4 | Apr 21 | IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting Affected: 7.6.1.2 |
| CVE-2021-29743 | 5.4 | Aug 30 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting Affected: 7.6.0.0 through 7.6.0.10; 7.6.1.0 through 7.6.1.2 |
| CVE-2021-29744 | 5.4 | Aug 27 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting Affected: 7.6.0.0; 7.6.0.1 |
| CVE-2021-20374 | 5.4 | May 19 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting Affected: 7.6.0; 7.6.1 |
| CVE-2020-4223 | 5.4 | Jun 26 | IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting Affected: 7.6.0.10; 7.6.1.1 |
| CVE-2019-4749 | 5.4 | Apr 17 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6.1.1 |
| CVE-2019-4446 | 5.4 | Apr 17 | IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters Affected: 7.6.0; 7.6.1; 7.6.1.1 |
| CVE-2019-4486 | 5.4 | Oct 24 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6.0.0 before 7.6.0.10; 7.6.1.0 before 7.6.1.1 |
| CVE-2019-4303 | 5.4 | Jun 19 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6 |
| CVE-2018-1584 | 5.4 | Nov 28 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6 |
| CVE-2018-1872 | 5.4 | Nov 9 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6 |
| CVE-2018-1686 | 5.4 | Oct 5 | IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting Affected: 7.6 through 7.6.3 |
| CVE-2018-1715 | 5.4 | Aug 16 | IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting Affected: 7.6; 7.6.0; 7.6.0.1; 7.6.1; 7.6.2; 7.6.2.1; +4 more |
| CVE-2018-1554 | 5.4 | Aug 2 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6 |
| CVE-2018-1415 | 5.4 | Feb 22 | IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Affected: 7.6.0.5; 7.6.0.6; 7.6.0.7; 7.6.0.8 |
| CVE-2017-1208 | 5.4 | Jul 5 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting Affected: 7.1; 7.1.1; 7.5; 7.6 |
| CVE-2017-1291 | 5.4 | May 26 | IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks Affected: 7.5; 7.6 |
| CVE-2016-6072 | 5.4 | Feb 1 | IBM Maximo Asset Management is vulnerable to cross-site scripting Affected: 7.6.0.0 |
| CVE-2016-5905 | 5.4 | Nov 30 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary… Affected: 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.5.0.5; +9 more |
| CVE-2016-0399 | 5.4 | Jul 2 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated… Affected: 7.1; 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.3; 7.1.1.5; +22 more |
| CVE-2016-0262 | 5.4 | Mar 14 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001 allows remote… Affected: 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.3; 7.5.0.0; 7.5.0.1; +12 more |
| CVE-2015-7448 | 5.4 | Mar 12 | SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0… Affected: 7.1; 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.5; 7.1.1.6; +21 more |
| CVE-2015-5017 | 5.4 | Jan 3 | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and… Affected: 7.1; 7.5; 7.6 |
| CVE-2015-7396 | 5.4 | Jan 2 | The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1… Affected: 7.5; 7.6 |
| CVE-2015-7451 | 5.4 | Jan 2 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2,… Affected: 7.5; 7.6 |
| CVE-2023-32334 | 5.3 | Jun 5 | IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters Affected: 7.6.1.2; 7.6.1.3 |
| CVE-2023-27860 | 5.3 | Apr 27 | IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message Affected: 7.6.1.2; 7.6.1.3 |
| CVE-2018-1698 | 5.3 | Sep 13 | IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information from error messages Affected: 7.6 through 7.6.3 |
| CVE-2017-1292 | 5.3 | May 26 | IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system Affected: 7.5; 7.6 |
| CVE-2016-5896 | 5.3 | Feb 1 | IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser Affected: 7.6 |
| CVE-2016-5987 | 5.3 | Nov 30 | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP… Affected: 7.1.0.0; 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.3; 7.1.1.5; +25 more |
| CVE-2016-0393 | 5.3 | Jul 17 | IBM Maximo Asset Management 7.5 before 7.5.0.10-TIV-MBS-IFIX002 and 7.6 before 7.6.0.5-TIV-MAMMT-FP001 allows remote attackers to obtain sensitive URL information by reading log… Affected: 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.5.0.5; +11 more |
| CVE-2020-4526 | 4.3 | Sep 15 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: 7.6.0 before 7.6.0.10; 7.6.1 before 7.6.1.2 |
| CVE-2019-4582 | 4.3 | Aug 13 | IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system Affected: 7.6.0.0; 7.6.0.1 |
| CVE-2019-4745 | 4.3 | Feb 24 | IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL Affected: 7.6.1.0 |
| CVE-2019-4583 | 4.3 | Feb 20 | IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks Affected: 7.6.0.10; 7.6.1.1 |
| CVE-2019-4512 | 4.3 | Oct 9 | IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system Affected: 7.6.1.1 |
| CVE-2019-4056 | 4.3 | Jun 6 | IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files Affected: 7.6 |
| CVE-2018-1697 | 4.3 | Dec 5 | IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP request Affected: 7.6 |
| CVE-2018-1528 | 4.3 | Aug 6 | IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API Affected: 7.6; 7.6.0; 7.6.0.1; 7.6.1; 7.6.2; 7.6.2.1; +4 more |
| CVE-2015-5016 | 4.3 | Mar 27 | IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain… Affected: 7.1; 7.5; 7.6 |
| CVE-2017-1357 | 4.3 | Aug 9 | IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks Affected: 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.5.0.5; +13 more |
| CVE-2016-8987 | 4.3 | Jun 8 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an authenticated user to view incorrect item sets that they should not have access to view Affected: 7.1; 7.5; 7.6 |
| CVE-2016-0289 | 4.3 | Apr 5 | shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended… Affected: 7.1; 7.5; 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; +11 more |
| CVE-2016-0222 | 4.3 | Mar 14 | IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via… Affected: 7.6.0.0; 7.6.0.1; 7.6.0.2; 7.6.0.3; 7.6.0.0; 7.6.0.1; +2 more |
| CVE-2015-5051 | 4.3 | Jan 3 | IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud… Affected: 7.5; 7.6 |
| CVE-2015-7452 | 4.3 | Jan 2 | IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 FP9, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud… Affected: 7.5; 7.6 |
| CVE-2015-7487 | 4.1 | Jan 27 | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and… Affected: 7.1; 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.5; 7.1.1.6; +23 more |
| CVE-2024-22333 | 3.3 | Jun 13 | IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system Affected: 7.6.1.3 |