Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm maximo for aviation 7.6.0.0 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2018-1528
IBM Maximo Asset Management 7.6 up to and including 7.6.3 could allow an authenticated user to obtain sensitive information from the WhoAmI API. IBM X-Force ID: 142290.
Ibm Maximo For Transportation 7.6.1.0Ibm Maximo For Transportation 7.6.2.0Ibm Maximo For Transportation 7.6.2.1Ibm Maximo For Transportation 7.6.2.2Ibm Maximo Asset ManagementIbm Maximo For Aviation 7.6.3.0Ibm Maximo For Nuclear Power 7.6.0.0Ibm Maximo For Transportation 7.6.2.4Ibm Smartcloud Control Desk 7.6.0.0Ibm Maximo For Aviation 7.6.0.0Ibm Maximo For Aviation 7.6.1.0Ibm Maximo For Aviation 7.6.2.0Ibm Maximo For Aviation 7.6.2.1Ibm Smartcloud Control Desk 7.6.0.1Ibm Maximo For Life Sciences 7.6.0.0Ibm Maximo For Oil And Gas 7.6.0.0Ibm Maximo For Transportation 7.6.2.3Ibm Maximo For Utilities 7.6.0.0
9
CVSSv2
CVE-2018-1524
IBM Maximo Asset Management 7.6 up to and including 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116.
Ibm Maximo Asset ManagementIbm Maximo For Aviation 7.6.0.0Ibm Maximo For Aviation 7.6.1.0Ibm Maximo For Oil And Gas 7.5.0.0Ibm Maximo For Utilities 7.6.0.0Ibm Maximo For Nuclear Power 7.6.0.0Ibm Maximo For Oil And Gas 7.6.0.0Ibm Maximo For Aviation 7.6.2.0Ibm Maximo For Aviation 7.6.3.0Ibm Smartcloud Control Desk 7.6.0.1Ibm Maximo For Life Sciences 7.6.0.0Ibm Maximo For Transportation 7.6.2.0Ibm Maximo For Transportation 7.6.2.1Ibm Maximo For Transportation 7.6.2.2Ibm Maximo For Transportation 7.6.2.3Ibm Maximo For Aviation 7.6.2.1Ibm Maximo For Transportation 7.6.1.0Ibm Maximo For Transportation 7.6.2.4Ibm Smartcloud Control Desk 7.6.0.0
3.5
CVSSv2
CVE-2019-4429
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Ibm Control Desk 7.6.1Ibm Control Desk 7.6.1.1Ibm Maximo Anywhere 7.6.0.0Ibm Maximo Anywhere 7.6.1.0Ibm Maximo For Aviation 7.6.6Ibm Maximo For Aviation 7.6.7Ibm Maximo For Aviation 7.6.8Ibm Maximo For Life Sciences 7.6Ibm Maximo For Nuclear Power 7.6.1Ibm Maximo For Oil And Gas 7.6.1Ibm Maximo For Transportation 7.6.2.3Ibm Maximo For Transportation 7.6.2.4Ibm Maximo For Transportation 7.6.2.5Ibm Maximo For Utilities 7.6.0.1Ibm Maximo For Utilities 7.6.0.2Ibm Smartcloud Control Desk -Ibm Tivoli Integration Composer 7.6.0.1Ibm Tivoli Integration Composer 7.6.0.2
3.5
CVSSv2
CVE-2016-6072
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Tivoli Integration Composer -Ibm Tivoli Service Request Manager -Ibm Smartcloud Control Desk -Ibm Maximo For Life Sciences -Ibm Tivoli Asset Management For It -Ibm Maximo Asset Management 7.6.0.0Ibm Maximo For Transportation -Ibm Maximo For Nuclear Power -Ibm Maximo For Aviation -Ibm Maximo For Oil And Gas -Ibm Maximo For Utilities -Ibm Tivoli Change And Configuration Management Database -
5.5
CVSSv2
CVE-2019-4446
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
Ibm Control Desk 7.6.1Ibm Control Desk 7.6.1.1Ibm Maximo Asset Configuration Manager 7.6.6Ibm Maximo Asset Configuration Manager 7.6.7Ibm Maximo Asset Configuration Manager 7.6.7.1Ibm Maximo Asset Health Insights 7.6.1Ibm Maximo Asset Health Insights 7.6.1.1Ibm Maximo Asset Management 7.6.0Ibm Maximo Asset Management 7.6.1Ibm Maximo Asset Management 7.6.1.1Ibm Maximo Asset Management Scheduler 7.6.7Ibm Maximo Asset Management Scheduler 7.6.7.1Ibm Maximo Asset Management Scheduler 7.6.7.3Ibm Maximo Asset Management Scheduler Plus 7.6.7Ibm Maximo Asset Management Scheduler Plus 7.6.7.1Ibm Maximo Asset Management Scheduler Plus 7.6.7.3Ibm Maximo Calibration 7.6Ibm Maximo Enterprise Adapter 7.6Ibm Maximo Enterprise Adapter 7.6.1Ibm Maximo Equipment Maintenance Assistant On-premises -Ibm Maximo For Aviation 7.6.6Ibm Maximo For Aviation 7.6.7
3.5
CVSSv2
CVE-2019-4749
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Control Desk 7.6.1Ibm Control Desk 7.6.1.1Ibm Maximo Asset Configuration Manager 7.6.6Ibm Maximo Asset Configuration Manager 7.6.7Ibm Maximo Asset Configuration Manager 7.6.7.1Ibm Maximo Asset Health Insights 7.6.1Ibm Maximo Asset Health Insights 7.6.1.1Ibm Maximo Asset Management 7.6.1.1Ibm Maximo Asset Management Scheduler 7.6.7Ibm Maximo Asset Management Scheduler 7.6.7.1Ibm Maximo Asset Management Scheduler 7.6.7.3Ibm Maximo Asset Management Scheduler Plus 7.6.7Ibm Maximo Asset Management Scheduler Plus 7.6.7.1Ibm Maximo Asset Management Scheduler Plus 7.6.7.3Ibm Maximo Calibration 7.6Ibm Maximo Enterprise Adapter 7.6Ibm Maximo Enterprise Adapter 7.6.1Ibm Maximo Equipment Maintenance Assistant -Ibm Maximo For Aviation 7.6.6Ibm Maximo For Aviation 7.6.7Ibm Maximo For Aviation 7.6.8Ibm Maximo For Life Sciences 7.6
4.3
CVSSv2
CVE-2019-4644
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Control Desk 7.6.1Ibm Control Desk 7.6.1.1Ibm Maximo Asset Configuration Manager 7.6.6Ibm Maximo Asset Configuration Manager 7.6.7Ibm Maximo Asset Configuration Manager 7.6.7.1Ibm Maximo Asset Health Insights 7.6.1Ibm Maximo Asset Health Insights 7.6.1.1Ibm Maximo Asset Management 7.6.1.1Ibm Maximo Asset Management Scheduler 7.6.7Ibm Maximo Asset Management Scheduler 7.6.7.1Ibm Maximo Asset Management Scheduler 7.6.7.3Ibm Maximo Asset Management Scheduler Plus 7.6.7Ibm Maximo Asset Management Scheduler Plus 7.6.7.1Ibm Maximo Asset Management Scheduler Plus 7.6.7.3Ibm Maximo Calibration 7.6Ibm Maximo Enterprise Adapter 7.6Ibm Maximo Enterprise Adapter 7.6.1Ibm Maximo Equipment Maintenance Assistant -Ibm Maximo For Aviation 7.6.6Ibm Maximo For Aviation 7.6.7Ibm Maximo For Aviation 7.6.8Ibm Maximo For Life Sciences 7.6
5.8
CVSSv2
CVE-2020-4409
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote malicious user to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicio...
Ibm Control Desk 7.6.1Ibm Control Desk 7.6.1.1Ibm Maximo Asset Configuration Manager 7.6.6Ibm Maximo Asset Configuration Manager 7.6.7Ibm Maximo Asset Configuration Manager 7.6.7.1Ibm Maximo Asset Health Insights 7.6.1Ibm Maximo Asset Health Insights 7.6.1.1Ibm Maximo Asset ManagementIbm Maximo Asset Management Scheduler 7.6.7Ibm Maximo Asset Management Scheduler 7.6.7.1Ibm Maximo Asset Management Scheduler 7.6.7.3Ibm Maximo Asset Management Scheduler Plus 7.6.7Ibm Maximo Asset Management Scheduler Plus 7.6.7.1Ibm Maximo Asset Management Scheduler Plus 7.6.7.3Ibm Maximo Calibration 7.6Ibm Maximo Enterprise Adapter 7.6Ibm Maximo Enterprise Adapter 7.6.1Ibm Maximo Equipment Maintenance Assistant -Ibm Maximo For Aviation 7.6.6Ibm Maximo For Aviation 7.6.7Ibm Maximo For Aviation 7.6.8Ibm Maximo For Life Sciences 7.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook