Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm maximo for oil and gas - vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2019-4546
After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.
Ibm Maximo For Oil And Gas 7.6.1Ibm Maximo Health\\, Safety And Environment Manager 7.6.1
5
CVSSv2
CVE-2016-5896
IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.
Ibm Maximo Asset Management 7.6Ibm Maximo For Aviation 7.6Ibm Maximo For Nuclear Power 7.6Ibm Maximo For Oil And Gas 7.6Ibm Maximo For Transportation 7.6Ibm Maximo For Life Sciences 7.6
6.8
CVSSv2
CVE-2013-3323
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Ibm Change And Configuration Management Database 7.1Ibm Change And Configuration Management Database 7.2Ibm Maximo Asset Management 6.2Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.5Ibm Maximo Asset Management Essentials 6.2Ibm Maximo Asset Management Essentials 7.1Ibm Maximo Asset Management Essentials 7.5Ibm Maximo For Government 6.2Ibm Maximo For Government 7.1Ibm Maximo For Government 7.5Ibm Maximo For Life Sciences 6.2Ibm Maximo For Life Sciences 6.4Ibm Maximo For Life Sciences 6.5Ibm Maximo For Life Sciences 7.1Ibm Maximo For Life Sciences 7.5Ibm Maximo For Nuclear Power 6.2Ibm Maximo For Nuclear Power 6.3Ibm Maximo For Nuclear Power 7.1Ibm Maximo For Nuclear Power 7.5Ibm Maximo For Oil And Gas 6.2Ibm Maximo For Oil And Gas 6.3
4.3
CVSSv2
CVE-2016-5902
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Maximo For Oil And Gas 7.6Ibm Maximo For Transportation 7.6Ibm Maximo For Utilities 7.6Ibm Maximo For Aviation 7.6Ibm Maximo For Aviation 7.1Ibm Maximo For Energy Optimization 7.1Ibm Maximo For Government 7.1Ibm Maximo Asset Management 7.1Ibm Maximo For Nuclear Power 7.6Ibm Maximo For Energy Optimization 7.6Ibm Maximo For Nuclear Power 7.5Ibm Maximo For Transportation 7.5Ibm Maximo For Nuclear Power 7.1Ibm Maximo For Transportation 7.1Ibm Maximo For Life Sciences 7.5Ibm Maximo Asset Management 7.5Ibm Maximo For Utilities 7.5Ibm Maximo For Aviation 7.5Ibm Maximo For Energy Optimization 7.5Ibm Maximo For Government 7.5Ibm Maximo Asset Management 7.6Ibm Maximo For Government 7.6
9
CVSSv2
CVE-2018-1524
IBM Maximo Asset Management 7.6 up to and including 7.6.3 installs with a default administrator account that a remote intruder could use to gain administrator access to the system. This vulnerability is due to an incomplete fix for CVE-2015-4966. IBM X-Force ID: 142116.
Ibm Maximo Asset ManagementIbm Maximo For Aviation 7.6.0.0Ibm Maximo For Aviation 7.6.1.0Ibm Maximo For Oil And Gas 7.5.0.0Ibm Maximo For Utilities 7.6.0.0Ibm Maximo For Nuclear Power 7.6.0.0Ibm Maximo For Oil And Gas 7.6.0.0Ibm Maximo For Aviation 7.6.2.0Ibm Maximo For Aviation 7.6.3.0Ibm Smartcloud Control Desk 7.6.0.1Ibm Maximo For Life Sciences 7.6.0.0Ibm Maximo For Transportation 7.6.2.0Ibm Maximo For Transportation 7.6.2.1Ibm Maximo For Transportation 7.6.2.2Ibm Maximo For Transportation 7.6.2.3Ibm Maximo For Aviation 7.6.2.1Ibm Maximo For Transportation 7.6.1.0Ibm Maximo For Transportation 7.6.2.4Ibm Smartcloud Control Desk 7.6.0.0
3.5
CVSSv2
CVE-2015-4944
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 up to and including 7.1.1.13, 7.5.0 prior to 7.5.0.8 IFIX003, and 7.6.0 prior to 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x prior to 7.5.0.8 IFIX003 and 7.6.0 prior to 7.6.0.1 IFIX001 for SmartCloud C...
Ibm Maximo Asset Management 7.1.1.10Ibm Maximo Asset Management 7.1.1.12Ibm Maximo Asset Management 7.1.1.7Ibm Maximo Asset Management 7.1.1.9Ibm Maximo Asset Management 7.5.0.1Ibm Maximo Asset Management 7.5.0.6Ibm Maximo Asset Management 7.5.0.8Ibm Maximo For Government 7.5.0.1Ibm Maximo For Government 7.5.0.3Ibm Maximo For Life Sciences 7.5.0.0Ibm Maximo For Life Sciences 7.5.0.2Ibm Maximo For Life Sciences 7.5.0.4Ibm Maximo For Nuclear Power 7.5.0.1Ibm Maximo For Nuclear Power 7.5.0.3Ibm Maximo For Oil And Gas 7.5.0.2Ibm Maximo Asset Management 7.1.1.13Ibm Maximo Asset Management 7.1.1.2Ibm Maximo Asset Management 7.1.1.5Ibm Maximo Asset Management 7.1.1.6Ibm Maximo Asset Management Essentials 7.1Ibm Maximo Asset Management Essentials 7.5Ibm Maximo For Energy Optimization 7.1
4
CVSSv2
CVE-2015-4965
maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 up to and including 7.1.1.13, 7.5.0 prior to 7.5.0.8 IFIX004, and 7.6.0 prior to 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x prior to 7.5.0.8 IFIX004 and 7.6.0 prior to 7.6.0.1 IFIX002 for Sm...
Ibm Maximo Asset Management 7.1.1.5Ibm Maximo Asset Management 7.1.1.6Ibm Maximo Asset Management 7.1.1.7Ibm Maximo Asset Management 7.1.1.8Ibm Maximo Asset Management Essentials 7.5Ibm Maximo For Energy Optimization 7.1Ibm Maximo For Government 7.1Ibm Maximo For Government 7.5.0.0Ibm Maximo For Government 7.5.0.1Ibm Maximo For Life Sciences 7.5.0.6Ibm Maximo For Nuclear Power 7.1Ibm Maximo For Nuclear Power 7.5.0.0Ibm Maximo For Nuclear Power 7.5.0.1Ibm Maximo For Transportation 7.1Ibm Maximo For Transportation 7.5.0.0Ibm Maximo For Transportation 7.5.0.1Ibm Maximo For Transportation 7.5.0.2Ibm Tivoli Asset Management For It 7.1Ibm Tivoli Service Request Manager 7.1.0Ibm Tivoli Service Request Manager 7.2.0.0Ibm Change And Configuration Management Database 7.1Ibm Maximo Asset Management 7.1.1.12
6.5
CVSSv2
CVE-2015-4966
IBM Maximo Asset Management 7.1 up to and including 7.1.1.13, 7.5.0 prior to 7.5.0.9 FP009, and 7.6.0 prior to 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 prior to 7.5.0.9 FP009, 7.5.1, and 7.6.0 prior to 7.6.0.2 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management...
Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.1.1Ibm Maximo Asset Management 7.5.0.2Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.5.0.4Ibm Maximo Asset Management 7.5.0.5Ibm Maximo For Government 7.5.0.4Ibm Maximo For Government 7.5.0.5Ibm Maximo For Government 7.5.0.6Ibm Maximo For Life Sciences 7.1Ibm Maximo For Nuclear Power 7.5.0.5Ibm Maximo For Nuclear Power 7.5.0.6Ibm Maximo For Oil And Gas 7.1Ibm Maximo For Oil And Gas 7.5.0.0Ibm Maximo For Transportation 7.5.0.6Ibm Maximo For Utilities 7.1Ibm Maximo For Utilities 7.5.0.0Ibm Maximo For Utilities 7.5.0.1Ibm Smartcloud Control Desk 7.6Ibm Maximo Asset Management 7.1.1.10Ibm Maximo Asset Management 7.1.1.12Ibm Maximo Asset Management 7.1.1.7
6.5
CVSSv2
CVE-2015-4967
SQL injection vulnerability in IBM Maximo Asset Management 7.1 up to and including 7.1.1.13, 7.5.0 prior to 7.5.0.8 IFIX004, and 7.6.0 prior to 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x prior to 7.5.0.8 IFIX004 and 7.6.0 prior to 7.6.0.1 IFIX002 for SmartCloud Control Desk; ...
Ibm Maximo Asset Management 7.1.1.6Ibm Maximo Asset Management 7.1.1.7Ibm Maximo Asset Management 7.1.1.8Ibm Maximo Asset Management 7.1.1.9Ibm Maximo For Government 7.1Ibm Maximo For Government 7.5.0.0Ibm Maximo For Government 7.5.0.1Ibm Maximo For Government 7.5.0.2Ibm Maximo For Nuclear Power 7.5.0.0Ibm Maximo For Nuclear Power 7.5.0.1Ibm Maximo For Nuclear Power 7.5.0.2Ibm Maximo For Nuclear Power 7.5.0.3Ibm Maximo For Transportation 7.5.0.0Ibm Maximo For Transportation 7.5.0.1Ibm Maximo For Transportation 7.5.0.2Ibm Maximo For Transportation 7.5.0.3Ibm Maximo For Transportation 7.5.0.4Ibm Tivoli Service Request Manager 7.1.0Ibm Tivoli Service Request Manager 7.2.0.0Ibm Change And Configuration Management Database 7.1Ibm Change And Configuration Management Database 7.2Ibm Maximo Asset Management 7.1
4
CVSSv2
CVE-2015-7395
IBM Maximo Asset Management 7.1 up to and including 7.1.1.13, 7.5.0 prior to 7.5.0.8 IFIX005, and 7.6.0 prior to 7.6.0.2 FP002; Maximo Asset Management 7.5.0 prior to 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 prior to 7.6.0.2 FP002 for SmartCloud Control Desk; and Maximo Asset Management...
Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.1.1Ibm Maximo Asset Management 7.1.1.1Ibm Maximo Asset Management 7.5.0.2Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.5.0.4Ibm Maximo Asset Management 7.5.0.5Ibm Maximo For Government 7.5.0.5Ibm Maximo For Government 7.5.0.6Ibm Maximo For Life Sciences 7.1Ibm Maximo For Life Sciences 7.5.0.0Ibm Maximo For Nuclear Power 7.5.0.5Ibm Maximo For Nuclear Power 7.5.0.6Ibm Maximo For Oil And Gas 7.1Ibm Maximo For Oil And Gas 7.5.0.0Ibm Maximo Asset Management 7.1.1.11Ibm Maximo Asset Management 7.1.1.13Ibm Maximo Asset Management 7.1.1.8Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management 7.5.0.7Ibm Maximo Asset Management 7.5.0.9Ibm Maximo For Government 7.5.0.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook