Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
enterprise asset management vulnerabilities and exploits
(subscribe to this query)
516
VMScore
CVE-2021-27416
An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in t...
Hitachienergy Ellipse Enterprise Asset Management
383
VMScore
CVE-2021-27414
An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials.
Hitachienergy Ellipse Enterprise Asset Management
355
VMScore
CVE-2017-7953
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
Infor Enterprise Asset Management 11.0
1 EDB exploit
655
VMScore
CVE-2017-7952
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
Infor Enterprise Asset Management 11.0 Build 201410
1 EDB exploit
383
VMScore
CVE-2019-4644
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Life Sciences 7.6
312
VMScore
CVE-2019-4749
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Life Sciences 7.6
516
VMScore
CVE-2020-4409
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote malicious user to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to redirect a user to a malicio...
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Life Sciences 7.6
490
VMScore
CVE-2019-4446
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management 7.6.0
Ibm Maximo Asset Management 7.6.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant On-premises -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
445
VMScore
CVE-2012-6685
Nokogiri prior to 1.5.4 is vulnerable to XXE attacks
Nokogiri Nokogiri
Redhat Cloudforms Management Engine 5.0
Redhat Enterprise Mrg 2.0
Redhat Openshift 2.0
Redhat Openstack 4.0
Redhat Openstack 6.0
Redhat Openstack Foreman -
Redhat Satellite 6.0
Redhat Subscription Asset Manager -
1 Article
383
VMScore
CVE-2013-6460
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents
Nokogiri Nokogiri
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Debian Debian Linux 10.0
Redhat Cloudforms Management Engine 5.0
Redhat Enterprise Mrg 2.0
Redhat Openstack 3.0
Redhat Openstack 4.0
Redhat Satellite 6.0
Redhat Subscription Asset Manager -
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581
reflected XSS
CVE-2024-26925
CVE-2024-27956
LFI
CVE-2024-3607
CVE-2024-3107
CVE-2024-3295
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »