Aller au contenu

Vulnérabilités connues pour IBM Maximo Asset Management

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2019-4512 IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in… 4.3 Moyenne 9 oct. 2019
CVE-2019-4430 IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system 4.3 Moyenne 17 juil. 2019
CVE-2019-4364 IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to… 5.5 Moyenne 19 juin 2019
CVE-2019-4303 IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting 5.4 Moyenne 19 juin 2019
CVE-2019-4056 IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to… 4.3 Moyenne 6 juin 2019
CVE-2019-4048 IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a… 2.1 Faible 6 juin 2019
CVE-2018-2028 IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site… 6.5 Moyenne 6 juin 2019
CVE-2018-1697 IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted… 4.3 Moyenne 5 déc. 2018
CVE-2018-1584 IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting 5.4 Moyenne 28 nov. 2018
CVE-2018-1872 IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting 5.4 Moyenne 9 nov. 2018
CVE-2018-1686 IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting 5.4 Moyenne 5 oct. 2018
CVE-2018-1698 IBM Maximo Asset Management 7.6 through 7.6.3 could allow an unauthenticated attacker to obtain sensitive information… 5.3 Moyenne 13 sept. 2018
CVE-2018-1699 IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection 6.3 Moyenne 24 août 2018
CVE-2018-1715 IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting 5.4 Moyenne 16 août 2018
CVE-2018-1528 IBM Maximo Asset Management 7.6 through 7.6.3 could allow an authenticated user to obtain sensitive information from the… 4.3 Moyenne 6 août 2018
CVE-2018-1524 IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder could… 8.8 Élevée 3 août 2018
CVE-2018-1554 IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting 5.4 Moyenne 2 août 2018
CVE-2018-1415 IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting Non notée 22 févr. 2018
CVE-2018-1414 IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection Non notée 22 févr. 2018
CVE-2017-1499 IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow… Non notée 14 févr. 2018
CVE-2017-1558 IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open… Non notée 13 déc. 2017
CVE-2017-1352 IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could… Non notée 12 sept. 2017
CVE-2017-1357 IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails… Non notée 9 août 2017
CVE-2017-1176 IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to… Non notée 5 juil. 2017
CVE-2017-1208 IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting Non notée 5 juil. 2017

Autres produits IBM