| CVE-2019-4512 |
IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in…
|
4.3
Medium
|
Oct 9, 2019 |
| CVE-2019-4430 |
IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system
|
4.3
Medium
|
Jul 17, 2019 |
| CVE-2019-4364 |
IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to…
|
5.5
Medium
|
Jun 19, 2019 |
| CVE-2019-4303 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jun 19, 2019 |
| CVE-2019-4056 |
IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to…
|
4.3
Medium
|
Jun 6, 2019 |
| CVE-2019-4048 |
IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a…
|
2.1
Low
|
Jun 6, 2019 |
| CVE-2018-2028 |
IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site…
|
6.5
Medium
|
Jun 6, 2019 |
| CVE-2018-1697 |
IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted…
|
4.3
Medium
|
Dec 5, 2018 |
| CVE-2018-1584 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 28, 2018 |
| CVE-2018-1872 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 9, 2018 |
| CVE-2018-1686 |
IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting
|
5.4
Medium
|
Oct 5, 2018 |
| CVE-2018-1698 |
IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information…
|
5.3
Medium
|
Sep 13, 2018 |
| CVE-2018-1699 |
IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection
|
6.3
Medium
|
Aug 24, 2018 |
| CVE-2018-1715 |
IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting
|
5.4
Medium
|
Aug 16, 2018 |
| CVE-2018-1528 |
IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the…
|
4.3
Medium
|
Aug 6, 2018 |
| CVE-2018-1524 |
IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could…
|
8.8
High
|
Aug 3, 2018 |
| CVE-2018-1554 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Aug 2, 2018 |
| CVE-2018-1415 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
Not rated
|
Feb 22, 2018 |
| CVE-2018-1414 |
IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection
|
Not rated
|
Feb 22, 2018 |
| CVE-2017-1499 |
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow…
|
Not rated
|
Feb 14, 2018 |
| CVE-2017-1558 |
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open…
|
Not rated
|
Dec 13, 2017 |
| CVE-2017-1352 |
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could…
|
Not rated
|
Sep 12, 2017 |
| CVE-2017-1357 |
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails…
|
Not rated
|
Aug 9, 2017 |
| CVE-2017-1176 |
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to…
|
Not rated
|
Jul 5, 2017 |
| CVE-2017-1208 |
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting
|
Not rated
|
Jul 5, 2017 |