CVE-2013-0451

CVE-2013-0451 affects IBM Maximo Asset Management and related Maximo/Tivoli products (6.2.x, 7.1.x, 7.5.x) with a SQL Injection vulnerability. The connected IBM bulletin describes the flaw as SQL Injection (noted as IV24726 in APARs) in the List Page Description filter and related components, ena...

CVE-2013-4017

CVE-2013-4017 is an SQL injection vulnerability in IBM Maximo Asset Management 7.1 prior to 7.1.1.12, enabling remote execution of arbitrary SQL via unspecified vectors. The IBM security bulletin lists affected products including Maximo Asset Management and related offerings across 6.2–7.5 lines,...

CVE-2013-5395

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2013-3971

CVE-2013-3971 affects IBM Maximo Asset Management and related products (7.1–7.1.1.12 and 7.5 before 7.5.0.5). The bulletin indicates a security bypass vulnerability that allows remote authenticated users to bypass intended access restrictions via unspecified vectors. The issue is mitigated by app...

CVE-2013-4014

CVE-2013-4014 is a cross-site scripting (XSS) vulnerability affecting IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM’s bulletin lists affected product...

CVE-2013-3973

CVE-2013-3973 is an SQL injection vulnerability affecting IBM Maximo Asset Management and related Maximo offerings. IBM’s Security Bulletin 08A29F46834AFA86A6AA4DC93AF4EFD8AE25757E46E0D8369F58AB4F578B9B87 lists affected products (Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

CVE-2013-5380

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-4019

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4021

CVE-2013-4021 affects IBM Maximo Asset Management and related products (Maximo Asset Management 6.2.x up to 6.2.8; 7.1 up to 7.1.1.12; 7.5 up to 7.5.0.5) and several IBM Maximo/Tivoli components. The vulnerability is described as an unspecified remote file-inclusion issue exploitable by remote au...

CVE-2013-5383

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5382...

CVE-2013-4013

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-4019

CVE-2013-4019 is an XSS vulnerability in IBM Maximo Asset Management (and related Maximo offerings) affecting 6.2.x through 6.2.8 and 7.1 up to 7.1.1.12. The description specifies remote authenticated users can inject arbitrary web script/HTML via unspecified vectors. Connected IBM bulletin detai...

CVE-2013-4020

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2013-4020

CVE-2013-4020 affects IBM Maximo Asset Management and related products: Maximo Asset Management 6.2.x, 7.1.x, and 7.5 prior to 7.5.0.3 allow remote authenticated users to bypass access restrictions via unspecified vectors. The connected IBM bulletin and NVD entry confirm the affected versions and...

CVE-2013-4027

CVE-2013-4027 affects IBM Maximo Asset Management and related products (Maximo Asset Management 6.2.x, 7.1.x, 7.5) where remote authenticated users can bypass access restrictions via unspecified vectors. The connected IBM bulletin confirms vulnerable components and lists FIX/IF packages per relea...

CVE-2013-4027

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2013-3972

IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-3048

CVE-2013-3048 is an XSS vulnerability in IBM Maximo Asset Management and related Maximo products across multiple releases (6.2.x to 7.5). The issue allows remote authenticated users to inject arbitrary web script/HTML via unspecified vectors due to a cross-site scripting flaw. IBM’s bulletin list...

CVE-2013-4014

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2013-060 - Scald - Cross Site Scripting (XSS)

This module enables you to handle media assets atoms in Drupal with a Views-based library, drag and drop interface and manage content attribution/licensing/distribution. The module doesn't sufficiently filter atom properties such as the atom title when outputting atoms, thereby exposing a Cross...