Aller au contenu

Vulnérabilités connues pour IBM Maximo Asset Management

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-2986 IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting 5.5 Moyenne 25 avr. 2025
CVE-2025-2987 IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF) 3.8 Faible 21 avr. 2025
CVE-2024-45077 IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows… 6.5 Moyenne 24 janv. 2025
CVE-2024-45652 IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system 6.5 Moyenne 19 janv. 2025
CVE-2024-45088 IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting 6.4 Moyenne 11 nov. 2024
CVE-2024-22333 IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally… 3.3 Faible 13 juin 2024
CVE-2024-27266 IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing… 8.2 Élevée 14 mars 2024
CVE-2023-32335 IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL… 3.7 Faible 13 mars 2024
CVE-2023-38723 IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting 6.4 Moyenne 13 mars 2024
CVE-2023-32333 IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access… 6.5 Moyenne 2 févr. 2024
CVE-2023-47718 IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery… 4.3 Moyenne 19 janv. 2024
CVE-2023-32332 IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection 5.4 Moyenne 8 sept. 2023
CVE-2023-32334 IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in… 3.7 Faible 5 juin 2023
CVE-2022-43866 IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting 5.4 Moyenne 5 mai 2023
CVE-2023-27864 IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection 5.4 Moyenne 28 avr. 2023
CVE-2023-27860 IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message 5.3 Moyenne 27 avr. 2023
CVE-2022-35645 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to… 6.4 Moyenne 2 mars 2023
CVE-2022-41734 IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive information when a… 5.3 Moyenne 17 févr. 2023
CVE-2022-35281 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo… 5.5 Moyenne 6 janv. 2023
CVE-2022-40616 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain… 6.5 Moyenne 21 sept. 2022
CVE-2021-38924 IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a… 5.3 Moyenne 14 sept. 2022
CVE-2022-35714 IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting 5.4 Moyenne 26 août 2022
CVE-2021-29854 IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of… 5.4 Moyenne 3 mai 2022
CVE-2022-22436 IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting 5.4 Moyenne 21 avr. 2022
CVE-2022-22435 IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting 5.4 Moyenne 21 avr. 2022

Autres produits IBM