Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
maximo asset management vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv3
CVE-2019-4582
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 167...
Ibm Maximo Asset Management 7.6.0.0
Ibm Maximo Asset Management 7.6.0.1
8.2
CVSSv3
CVE-2020-4463
IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 181484.
Ibm Maximo Asset Management 7.6.0.1
Ibm Maximo Asset Management 7.6.0.2
1 Github repository
7.8
CVSSv3
CVE-2019-4591
IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 167451.
Ibm Maximo Asset Management
6.3
CVSSv3
CVE-2019-4650
IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170961.
Ibm Maximo Asset Management 7.6.1.1
5.4
CVSSv3
CVE-2020-4223
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
Ibm Maximo Asset Management 7.6.0.10
Ibm Maximo Asset Management 7.6.1.1
7.4
CVSSv3
CVE-2020-4529
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID:...
Ibm Maximo Asset Management 7.6.0.0
Ibm Maximo Asset Management 7.6.1.0
6.5
CVSSv3
CVE-2019-4478
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information that they should not normally have access to. IBM X-Force ID: 163998.
Ibm Maximo Asset Management 7.6.0.0
Ibm Maximo Asset Management 7.6.1
Ibm Maximo Asset Management 7.6.1.1
5.4
CVSSv3
CVE-2019-4749
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Life Sciences 7.6
5.4
CVSSv3
CVE-2019-4446
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management 7.6.0
Ibm Maximo Asset Management 7.6.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant On-premises -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
6.1
CVSSv3
CVE-2019-4644
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
Ibm Control Desk 7.6.1
Ibm Control Desk 7.6.1.1
Ibm Maximo Asset Configuration Manager 7.6.6
Ibm Maximo Asset Configuration Manager 7.6.7
Ibm Maximo Asset Configuration Manager 7.6.7.1
Ibm Maximo Asset Health Insights 7.6.1
Ibm Maximo Asset Health Insights 7.6.1.1
Ibm Maximo Asset Management 7.6.1.1
Ibm Maximo Asset Management Scheduler 7.6.7
Ibm Maximo Asset Management Scheduler 7.6.7.1
Ibm Maximo Asset Management Scheduler 7.6.7.3
Ibm Maximo Asset Management Scheduler Plus 7.6.7
Ibm Maximo Asset Management Scheduler Plus 7.6.7.1
Ibm Maximo Asset Management Scheduler Plus 7.6.7.3
Ibm Maximo Calibration 7.6
Ibm Maximo Enterprise Adapter 7.6
Ibm Maximo Enterprise Adapter 7.6.1
Ibm Maximo Equipment Maintenance Assistant -
Ibm Maximo For Aviation 7.6.6
Ibm Maximo For Aviation 7.6.7
Ibm Maximo For Aviation 7.6.8
Ibm Maximo For Life Sciences 7.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »