Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm maximo asset management 7.5 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2017-1175
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297.
Ibm Maximo Asset Management 7.1.1Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.5
2.1
CVSSv2
CVE-2017-1176
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299.
Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.1.1Ibm Maximo Asset Management 7.5Ibm Maximo Asset Management 7.6
4
CVSSv2
CVE-2016-8987
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an authenticated user to view incorrect item sets that they should not have access to view.
Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.5
4.3
CVSSv2
CVE-2016-8924
IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote malicious user to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-...
Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.5
6.5
CVSSv2
CVE-2016-9984
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated malicious user to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276.
Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.5
6
CVSSv2
CVE-2017-1352
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.
Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.5
4.9
CVSSv2
CVE-2015-7487
IBM Maximo Asset Management 7.1 up to and including 7.1.1.13, 7.5.0 prior to 7.5.0.9 IFIX002, and 7.6.0 prior to 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 prior to 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 prior to 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Manage...
Ibm Maximo For Transportation 7.1Ibm Maximo For Life Sciences 7.1Ibm Change And Configuration Management Database 7.2Ibm Tivoli Service Request Manager 7.2Ibm Maximo Asset Management Essentials 7.5.0.7Ibm Maximo Asset Management Essentials 7.5.0.5Ibm Maximo Asset Management 7.6.0.2Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.5.0.5Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.5.0.1Ibm Maximo Asset Management 7.1.1.7Ibm Maximo Asset Management 7.1.1.5Ibm Maximo Asset Management 7.1.1Ibm Maximo Asset Management 7.1Ibm Maximo For Oil And Gas 7.5Ibm Maximo For Oil And Gas 7.1Ibm Maximo For Utilities 7.5Ibm Maximo For Utilities 7.1Ibm Maximo Asset Management Essentials 7.5.0.3Ibm Maximo Asset Management Essentials 7.5.0.2Ibm Maximo Asset Management Essentials 7.5.0.1
4
CVSSv2
CVE-2015-5051
IBM Maximo Asset Management 7.5 prior to 7.5.0.8 IF6 and 7.6 prior to 7.6.0.2 IF1 and Maximo Asset Management 7.5 prior to 7.5.0.8 IF6, 7.5.1, and 7.6 prior to 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query...
Ibm Smartcloud Control Desk 7.6Ibm Smartcloud Control Desk 7.5Ibm Maximo For Transportation 7.5Ibm Maximo For Nuclear Power 7.5Ibm Maximo For Government 7.5Ibm Maximo Asset Management Essentials 7.5Ibm Maximo For Utilities 7.5Ibm Maximo For Life Sciences 7.6Ibm Maximo Asset Management 7.6Ibm Maximo For Oil And Gas 7.5Ibm Maximo For Life Sciences 7.5Ibm Maximo Asset Management Essentials 7.6Ibm Maximo Asset Management 7.5
4
CVSSv2
CVE-2016-0289
shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 prior to 7.5.0.10 and 7.6 prior to 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors.
Ibm Maximo Asset Management 7.6.0.3Ibm Maximo Asset Management 7.5.0.0Ibm Maximo Asset Management 7.5Ibm Maximo Asset Management 7.1Ibm Maximo Asset Management 7.6.0.1Ibm Maximo Asset Management 7.6Ibm Maximo Asset Management 7.5.0.3Ibm Maximo Asset Management 7.5.0.1Ibm Maximo Asset Management 7.5.0.8Ibm Maximo Asset Management 7.5.0.7Ibm Maximo Asset Management 7.5.0.6Ibm Maximo Asset Management 7.5.0.5Ibm Maximo Asset Management 7.6.0.2Ibm Maximo Asset Management 7.6.0.0Ibm Maximo Asset Management 7.5.0.9Ibm Maximo Asset Management 7.5.0.4Ibm Maximo Asset Management 7.5.0.2
5.5
CVSSv2
CVE-2015-7396
The Scheduler in IBM Maximo Asset Management 7.5 prior to 7.5.0.8 IF6 and 7.6 prior to 7.6.0.1 FP1 and Maximo Asset Management 7.5 prior to 7.5.0.8 IF6, 7.5.1, and 7.6 prior to 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access res...
Ibm Maximo For Utilities 7.5Ibm Maximo For Oil And Gas 7.5Ibm Maximo For Life Sciences 7.6Ibm Maximo For Life Sciences 7.5Ibm Maximo For Transportation 7.5Ibm Maximo Asset Management 7.5Ibm Smartcloud Control Desk 7.5Ibm Maximo For Government 7.5Ibm Maximo Asset Management 7.6Ibm Smartcloud Control Desk 7.6Ibm Maximo For Nuclear Power 7.5Ibm Maximo Asset Management Essentials 7.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook