Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm maximo asset management 7.6.0.1 vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2021-29744
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Ibm Maximo Asset Management 7.6.0.1
Ibm Maximo Asset Management 7.6.0.0
Ibm Maximo Application Suite 8.4
5.8
CVSSv2
CVE-2020-4409
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote malicious user to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicio...
Ibm Maximo For Life Sciences 7.6
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Control Desk 7.6.1
Ibm Maximo For Oil And Gas 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Utilities 7.6.0.2
Ibm Maximo For Utilities 7.6.0.1
Ibm Maximo For Transportation 7.6.2.5
Ibm Maximo For Nuclear Power 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Service Providers 7.6.3.3
Ibm Maximo For Service Providers 7.6.3.2
Ibm Maximo For Service Providers 7.6.3.1
Ibm Maximo Spatial Asset Management 7.6.0.5
Ibm Maximo Spatial Asset Management 7.6.0.4
Ibm Maximo Spatial Asset Management 7.6.0.3
Ibm Maximo Spatial Asset Management 7.6.0.2
Ibm Maximo Linear Asset Manager 7.6.0.3
4
CVSSv2
CVE-2019-4582
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 167...
Ibm Maximo Asset Management 7.6.0.1
Ibm Maximo Asset Management 7.6.0.0
6.4
CVSSv2
CVE-2020-4463
IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181484.
Ibm Maximo Asset Management 7.6.0.1
Ibm Maximo Asset Management 7.6.0.2
1 Github repository
3.5
CVSSv2
CVE-2019-4749
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Maximo For Life Sciences 7.6
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Control Desk 7.6.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo For Oil And Gas 7.6.1
Ibm Tivoli Integration Composer 7.6.0.2
Ibm Tivoli Integration Composer 7.6.0.1
Ibm Control Desk 7.6.1.1
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Utilities 7.6.0.2
Ibm Maximo For Utilities 7.6.0.1
Ibm Maximo For Transportation 7.6.2.5
Ibm Maximo For Nuclear Power 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Service Providers 7.6.3.3
Ibm Maximo For Service Providers 7.6.3.2
Ibm Maximo For Service Providers 7.6.3.1
Ibm Maximo Spatial Asset Management 7.6.0.5
Ibm Maximo Spatial Asset Management 7.6.0.4
4.3
CVSSv2
CVE-2019-4644
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Maximo For Life Sciences 7.6
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Control Desk 7.6.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo For Oil And Gas 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Utilities 7.6.0.2
Ibm Maximo For Utilities 7.6.0.1
Ibm Maximo For Transportation 7.6.2.5
Ibm Maximo For Nuclear Power 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Service Providers 7.6.3.3
Ibm Maximo For Service Providers 7.6.3.2
Ibm Maximo For Service Providers 7.6.3.1
Ibm Maximo Spatial Asset Management 7.6.0.5
Ibm Maximo Spatial Asset Management 7.6.0.4
Ibm Maximo Spatial Asset Management 7.6.0.3
Ibm Maximo Spatial Asset Management 7.6.0.2
5.5
CVSSv2
CVE-2019-4446
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
Ibm Maximo For Life Sciences 7.6
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Control Desk 7.6.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo For Oil And Gas 7.6.1
Ibm Maximo Asset Management 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Utilities 7.6.0.2
Ibm Maximo For Utilities 7.6.0.1
Ibm Maximo For Transportation 7.6.2.5
Ibm Maximo For Nuclear Power 7.6.1
Ibm Maximo For Service Providers 7.6.3.3
Ibm Maximo For Service Providers 7.6.3.2
Ibm Maximo For Service Providers 7.6.3.1
Ibm Maximo Linear Asset Manager 7.6.0.3
Ibm Maximo Linear Asset Manager 7.6.0.2
Ibm Maximo Linear Asset Manager 7.6.0.1
Ibm Maximo Enterprise Adapter 7.6
4
CVSSv2
CVE-2019-4745
IBM Maximo Asset Management 7.6.1.0 could allow a remote malicious user to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883.
Ibm Maximo Asset Management 7.6.1.0
Ibm Maximo For Life Sciences 7.6
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Maximo For Oil And Gas 7.6.1
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Utilities 7.6.0.2
Ibm Maximo For Utilities 7.6.0.1
Ibm Maximo For Transportation 7.6.2.5
Ibm Maximo For Nuclear Power 7.6.1
3.5
CVSSv2
CVE-2019-4429
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
Ibm Maximo For Life Sciences 7.6
Ibm Smartcloud Control Desk -
Ibm Maximo Anywhere 7.6.0.0
Ibm Maximo Anywhere 7.6.1.0
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Control Desk 7.6.1
Ibm Maximo For Oil And Gas 7.6.1
Ibm Tivoli Integration Composer 7.6.0.2
Ibm Tivoli Integration Composer 7.6.0.1
Ibm Control Desk 7.6.1.1
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Utilities 7.6.0.2
Ibm Maximo For Utilities 7.6.0.1
Ibm Maximo For Transportation 7.6.2.5
Ibm Maximo For Nuclear Power 7.6.1
3.5
CVSSv2
CVE-2019-4486
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Maximo Asset Management
Ibm Maximo For Life Sciences 7.6
Ibm Maximo For Aviation 7.6
Ibm Smartcloud Control Desk 7.6.0.1
Ibm Maximo For Utilities 7.6
Ibm Maximo For Aviation 7.6.2.1
Ibm Maximo For Transportation 7.6.2.1
Ibm Maximo For Transportation 7.6.2.2
Ibm Maximo For Transportation 7.6.2.3
Ibm Maximo For Transportation 7.6.2.4
Ibm Maximo For Aviation 7.6.1
Ibm Maximo For Aviation 7.6.2
Ibm Maximo For Aviation 7.6.3
Ibm Maximo For Transportation 7.6.2
Ibm Maximo For Transportation 7.6.1
Ibm Maximo For Oil And Gas 7.6.0
Ibm Maximo For Nuclear Power 7.6.0
Ibm Tivoli Integration Composer 7.2.0.0
Ibm Smartcloud Control Desk 7.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692
malicious code
XML injection
CVE-2024-28020
CVE-2024-35252
CVE-2024-5833
CVE-2024-30066
injection
CVE-2024-23282
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »