Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology shipped with IBM Maximo Asset Management (CVE-2020-14781)

2021-03-0619:14:50

www.ibm.com

0.001 Low

EPSS

Percentile

47.3%

JSON

Summary

CVE-2020-14781 was disclosed as part of the Oracle October 2020 Critical Patch Update. Java is used by Maximo Asset Management, Maximo Industry Solutions (including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for Utilities) and IBM Control Desk.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
IBM Maximo Asset Management	7.6.1.0
IBM Maximo Asset Management	7.6.1.2
IBM Maximo Asset Management	7.6.0.10
IBM Maximo Asset Management	7.6.1.1

Remediation/Fixes

Please consult the following security bulletin for vulnerability details and information about fixes:

Security Bulletin: CVE-2020-14781 may affect IBM® SDK, Java™ Technology Edition

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm maximo asset managementeq7.6.0
ibm maximo asset managementeq7.6.1
ibm maximo for service providerseq7.6.3.3
ibm maximo for service providerseq7.6.3.2
ibm maximo for service providerseq7.6.3.1
maximo linear asset managereq7.6.0.3
maximo linear asset managereq7.6.0.2
maximo linear asset managereq7.6.0.1
ibm maximo for aviationeq7.6.8
ibm maximo for aviationeq7.6.7

Name	Operator	Version
ibm maximo asset management	eq	7.6.0
ibm maximo asset management	eq	7.6.1
ibm maximo for service providers	eq	7.6.3.3
ibm maximo for service providers	eq	7.6.3.2
ibm maximo for service providers	eq	7.6.3.1
maximo linear asset manager	eq	7.6.0.3
maximo linear asset manager	eq	7.6.0.2
maximo linear asset manager	eq	7.6.0.1
ibm maximo for aviation	eq	7.6.8
ibm maximo for aviation	eq	7.6.7