| CVE-2021-38935 |
IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes…
|
5.9
Medium
|
Feb 18, 2022 |
| CVE-2021-29743 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting
|
6.4
Medium
|
Aug 30, 2021 |
| CVE-2021-29744 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Aug 27, 2021 |
| CVE-2021-20509 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection
|
7.0
High
|
Aug 12, 2021 |
| CVE-2021-20374 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting
|
6.5
Medium
|
May 19, 2021 |
| CVE-2020-4493 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using…
|
9.8
Critical
|
Oct 5, 2020 |
| CVE-2020-4409 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a…
|
6.8
Medium
|
Sep 16, 2020 |
| CVE-2020-4521 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the…
|
8.8
High
|
Sep 15, 2020 |
| CVE-2020-4526 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to…
|
4.3
Medium
|
Sep 15, 2020 |
| CVE-2019-4671 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection
|
6.3
Medium
|
Sep 15, 2020 |
| CVE-2019-4582 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system
|
4.3
Medium
|
Aug 13, 2020 |
| CVE-2020-4463 |
IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
8.2
High
|
Jul 29, 2020 |
| CVE-2019-4591 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to…
|
5.9
Medium
|
Jul 13, 2020 |
| CVE-2020-4223 |
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jun 26, 2020 |
| CVE-2019-4650 |
IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection
|
6.3
Medium
|
Jun 26, 2020 |
| CVE-2020-4529 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF)
|
7.3
High
|
Jun 8, 2020 |
| CVE-2019-4478 |
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information…
|
6.5
Medium
|
May 12, 2020 |
| CVE-2019-4749 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Apr 17, 2020 |
| CVE-2019-4644 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
6.1
Medium
|
Apr 17, 2020 |
| CVE-2019-4446 |
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by…
|
5.4
Medium
|
Apr 17, 2020 |
| CVE-2019-4745 |
IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an…
|
4.3
Medium
|
Feb 24, 2020 |
| CVE-2019-4583 |
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain sensitive information…
|
4.3
Medium
|
Feb 20, 2020 |
| CVE-2019-4429 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 19, 2020 |
| CVE-2019-4530 |
IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they…
|
4.3
Medium
|
Nov 20, 2019 |
| CVE-2019-4486 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Oct 24, 2019 |