Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm maximo asset management 7.6.0.0 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2019-4478
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information that they should not normally have access to. IBM X-Force ID: 163998.
Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.1Ibm Maximo Asset Management 7.6.1.1
5.5
CVSSv2
CVE-2019-4530
IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they should not normally be able to. IBM X-Force ID: 165586.
Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.1Ibm Maximo Asset Management 7.6.1.1
6.5
CVSSv2
CVE-2020-4529
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID:...
Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.1.0
4
CVSSv2
CVE-2019-4582
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 167...
Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.0.1
6.5
CVSSv2
CVE-2017-1499
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote malicious user to include arbitrary files, which could allow the malicious user to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106.
Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management Essentials 7.5.0.0
6.5
CVSSv2
CVE-2018-1414
IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 138820.
Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management Essentials 7.5.0.0
3.5
CVSSv2
CVE-2021-29744
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Ibm Maximo Application Suite 8.4Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.0.1
3.5
CVSSv2
CVE-2016-5905
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 prior to 7.5.0.10 IF3 and 7.6 prior to 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management 7.6.0.1Ibm Maximo Asset Management 7.6.0.3Ibm Maximo Asset Management 7.5.0.5Ibm Maximo Asset Management 7.5.0.6Ibm Maximo Asset Management 7.5.0.7Ibm Maximo Asset Management 7.5.0.8Ibm Maximo Asset Management 7.5.0.9Ibm Maximo Asset Management 7.5.0.1Ibm Maximo Asset Management 7.5.0.2Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.0.4Ibm Maximo Asset Management 7.6.0.2Ibm Maximo Asset Management 7.5.0.4
4
CVSSv2
CVE-2016-0289
shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 prior to 7.5.0.10 and 7.6 prior to 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors.
Ibm Maximo Asset Management 7.6.0.3Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management 7.5Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.6.0.1Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.5.0.1Ibm Maximo Asset Management 7.5.0.8Ibm Maximo Asset Management 7.5.0.7Ibm Maximo Asset Management 7.5.0.6Ibm Maximo Asset Management 7.5.0.5Ibm Maximo Asset Management 7.6.0.2Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.5.0.9Ibm Maximo Asset Management 7.5.0.4Ibm Maximo Asset Management 7.5.0.2
5
CVSSv2
CVE-2016-0393
IBM Maximo Asset Management 7.5 prior to 7.5.0.10-TIV-MBS-IFIX002 and 7.6 prior to 7.6.0.5-TIV-MAMMT-FP001 allows remote malicious users to obtain sensitive URL information by reading log files.
Ibm Maximo Asset Management 7.5.0.6Ibm Maximo Asset Management 7.5.0.5Ibm Maximo Asset Management 7.5.0.4Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.5.0.2Ibm Maximo Asset Management 7.5.0.10Ibm Maximo Asset Management 7.5.0.9Ibm Maximo Asset Management 7.5.0.1Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management 7.5.0.8Ibm Maximo Asset Management 7.5.0.7Ibm Maximo Asset Management 7.6.0.4Ibm Maximo Asset Management 7.6.0.3Ibm Maximo Asset Management 7.6.0.2Ibm Maximo Asset Management 7.6.0.1Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.6.0.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook