| CVE-2025-2986 |
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting
|
5.5
Medium
|
Apr 25, 2025 |
| CVE-2025-2987 |
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF)
|
3.8
Low
|
Apr 21, 2025 |
| CVE-2024-45077 |
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows…
|
6.5
Medium
|
Jan 24, 2025 |
| CVE-2024-45652 |
IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system
|
6.5
Medium
|
Jan 19, 2025 |
| CVE-2024-45088 |
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Nov 11, 2024 |
| CVE-2024-22333 |
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally…
|
3.3
Low
|
Jun 13, 2024 |
| CVE-2024-27266 |
IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing…
|
8.2
High
|
Mar 14, 2024 |
| CVE-2023-32335 |
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL…
|
3.7
Low
|
Mar 13, 2024 |
| CVE-2023-38723 |
IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Mar 13, 2024 |
| CVE-2023-32333 |
IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access…
|
6.5
Medium
|
Feb 2, 2024 |
| CVE-2023-47718 |
IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery…
|
4.3
Medium
|
Jan 19, 2024 |
| CVE-2023-32332 |
IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection
|
5.4
Medium
|
Sep 8, 2023 |
| CVE-2023-32334 |
IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in…
|
3.7
Low
|
Jun 5, 2023 |
| CVE-2022-43866 |
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting
|
5.4
Medium
|
May 5, 2023 |
| CVE-2023-27864 |
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection
|
5.4
Medium
|
Apr 28, 2023 |
| CVE-2023-27860 |
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message
|
5.3
Medium
|
Apr 27, 2023 |
| CVE-2022-35645 |
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to…
|
6.4
Medium
|
Mar 2, 2023 |
| CVE-2022-41734 |
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive information when a…
|
5.3
Medium
|
Feb 17, 2023 |
| CVE-2022-35281 |
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo…
|
5.5
Medium
|
Jan 6, 2023 |
| CVE-2022-40616 |
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain…
|
6.5
Medium
|
Sep 21, 2022 |
| CVE-2021-38924 |
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a…
|
5.3
Medium
|
Sep 14, 2022 |
| CVE-2022-35714 |
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Aug 26, 2022 |
| CVE-2021-29854 |
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of…
|
5.4
Medium
|
May 3, 2022 |
| CVE-2022-22436 |
IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 21, 2022 |
| CVE-2022-22435 |
IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 21, 2022 |