| CVE-2021-38935 |
IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes…
|
5.9
Moyenne
|
18 févr. 2022 |
| CVE-2021-29743 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting
|
6.4
Moyenne
|
30 août 2021 |
| CVE-2021-29744 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
27 août 2021 |
| CVE-2021-20509 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection
|
7.0
Élevée
|
12 août 2021 |
| CVE-2021-20374 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting
|
6.5
Moyenne
|
19 mai 2021 |
| CVE-2020-4493 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using…
|
9.8
Critique
|
5 oct. 2020 |
| CVE-2020-4409 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a…
|
6.8
Moyenne
|
16 sept. 2020 |
| CVE-2020-4521 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the…
|
8.8
Élevée
|
15 sept. 2020 |
| CVE-2020-4526 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to…
|
4.3
Moyenne
|
15 sept. 2020 |
| CVE-2019-4671 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection
|
6.3
Moyenne
|
15 sept. 2020 |
| CVE-2019-4582 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system
|
4.3
Moyenne
|
13 août 2020 |
| CVE-2020-4463 |
IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
8.2
Élevée
|
29 juil. 2020 |
| CVE-2019-4591 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to…
|
5.9
Moyenne
|
13 juil. 2020 |
| CVE-2020-4223 |
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
26 juin 2020 |
| CVE-2019-4650 |
IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection
|
6.3
Moyenne
|
26 juin 2020 |
| CVE-2020-4529 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF)
|
7.3
Élevée
|
8 juin 2020 |
| CVE-2019-4478 |
IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly sensitive information…
|
6.5
Moyenne
|
12 mai 2020 |
| CVE-2019-4749 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
17 avr. 2020 |
| CVE-2019-4644 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
6.1
Moyenne
|
17 avr. 2020 |
| CVE-2019-4446 |
IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by…
|
5.4
Moyenne
|
17 avr. 2020 |
| CVE-2019-4745 |
IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an…
|
4.3
Moyenne
|
24 févr. 2020 |
| CVE-2019-4583 |
IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain sensitive information…
|
4.3
Moyenne
|
20 févr. 2020 |
| CVE-2019-4429 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
19 févr. 2020 |
| CVE-2019-4530 |
IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they…
|
4.3
Moyenne
|
20 nov. 2019 |
| CVE-2019-4486 |
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
24 oct. 2019 |