IBM Maximo Asset Management XML External Entity Injection Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines (IBM). The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. An XML external entity injection vulnerability exists in IBM Maximo Asset Management, which can be exploited by an attacker to disclose sensitive information or consume memory resources.