MA
Product
Maximo Asset Management
182
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 24Medium 70Low 4
Watch
Add Maximo Asset Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3049 | – | Oct 1 | IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a… Affected: 7.1; 7.1.1; 7.1.1.1; 7.1.1.2; 7.1.1.5; 7.1.1.6; +11 more |
| CVE-2013-3048 | – | Oct 1 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject… Affected: 7.5.0.0; 7.5.0.1; 7.5.0.2; 6.2; 6.2.1; 6.2.2; +17 more |
| CVE-2013-3047 | – | Oct 1 | IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors Affected: 7.5.0.0; 7.5.0.1; 7.5.0.2; 7.5.0.3; 7.5.0.4; 7.1.1; +9 more |
| CVE-2013-0451 | – | Oct 1 | SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via… Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +16 more |
| CVE-2012-3323 | – | Oct 1 | IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +17 more |
| CVE-2013-0457 | – | Feb 20 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated… Affected: 7.5.0.0 |
| CVE-2012-6357 | – | Feb 20 | IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended… Affected: 7.5.0.0 |
| CVE-2012-6356 | – | Feb 20 | IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to… Affected: 7.5.0.0 |
| CVE-2012-6355 | – | Feb 20 | IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1… Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +15 more |
| CVE-2012-3328 | – | Feb 20 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service… Affected: 7.1 |
| CVE-2012-3327 | – | Feb 20 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2… Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +15 more |
| CVE-2012-3322 | – | Feb 20 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2… Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +15 more |
| CVE-2012-3316 | – | Feb 20 | Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2… Affected: 6.2; 6.2.1; 6.2.2; 6.2.3; 6.2.4; 6.2.5; +15 more |
| CVE-2012-3326 | – | Sep 10 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 7.5.0.0 |
| CVE-2012-3313 | – | Sep 10 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request… Affected: 6.2.0.0; 7.1.0.0; 7.5.0.0 |
| CVE-2012-2185 | – | Sep 10 | IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change… Affected: 6.2.0.0; 7.1.0.0; 7.5.0.0 |
| CVE-2012-2184 | – | Sep 10 | Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 7.1.0.0; 7.5.0.0 |
| CVE-2012-2183 | – | Sep 10 | Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.2.0.0; 7.1.0.0; 7.5.0.0 |
| CVE-2012-0747 | – | Sep 10 | SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.2.0.0; 7.1.0.0; 7.5.0.0 |
| CVE-2012-0746 | – | Sep 10 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 7.5.0.0 |
| CVE-2012-0728 | – | Sep 10 | SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 7.1.0.0; 7.5.0.0 |
| CVE-2012-0727 | – | Sep 10 | SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service… Affected: 7.5.0.0 |
| CVE-2012-0714 | – | Sep 10 | Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service… Affected: 6.2.0.0; 7.1.0.0; 7.5.0.0 |
| CVE-2012-0195 | – | Mar 13 | Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5;… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-4819 | – | Mar 13 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-4818 | – | Mar 13 | Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-4817 | – | Mar 13 | The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-4816 | – | Mar 13 | SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-1397 | – | Mar 13 | Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-1396 | – | Mar 13 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-1395 | – | Mar 13 | Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary… Affected: 6.2; 7.1; 7.5 |
| CVE-2011-1394 | – | Mar 13 | IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and… Affected: 6.2; 7.1; 7.5 |