2464 matches found
CVE-2023-32335
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075...
CVE-2023-32335
Summary: CVE-2023-32335 affects IBM Maximo Application Suite and IBM Maximo Asset Management. Affected versions: MAS 8.10–8.11 and IBM Maximo Asset Management 7.6.1.3. Root cause / impact: The vulnerable components store sensitive information in URL parameters, enabling information disclosure if ...
CVE-2023-38723 Maximo Asset Management cross-site scripting
IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2621...
IBM Maximo Application Suite 和 IBM Maximo Application Suite 安全漏洞
IBM Maximo Asset Management and IBM Maximo Application Suite are both products of International Business Machines IBM.IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. The solution is capable of managing all types of assets, such as facilities,...
PT-2024-13074 · Ibm · Ibm Maximo Application Suite - Maximo Mobile For Eam
Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite - Maximo Mobile for EAM versions 8.10 through 8.11 Description: The issue could disclose sensitive information to a local user. Recommendations: For versions 8.10 through 8.11, at the moment, there is no informati...
PT-2024-12319 · Ibm · Ibm Maximo Application Suite +1
Name of the Vulnerable Software and Affected Versions: IBM Maximo Application Suite versions 8.10 through 8.11 IBM Maximo Asset Management version 7.6.1.3 Description: The software stores sensitive information in URL parameters, which may lead to information disclosure if unauthorized parties hav...
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2023-38723)
Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. Vulnerability Details CVEID:CVE-2023-38723 DESCRIPTION: IBM Maximo Application Suite is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...
Security Bulletin: There is a vulnerability in tinymce-6.7.1.min.js used by IBM Maximo Asset Management application (CVE-2023-48219)
Summary There is a vulnerability in tinymce-6.7.1.min.js used by IBM Maximo Asset Management application. Vulnerability Details CVEID:CVE-2023-48219 DESCRIPTION: TinyMCE is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the text nodes. A remote attacke...
Security Bulletin: IBM Maximo Asset Management application is vulnerable to sensitive information disclosure (CVE-2023-32335)
Summary IBM Maximo Asset Management application is vulnerable to sensitive information disclosure. Vulnerability Details CVEID:CVE-2023-32335 DESCRIPTION: IBM Maximo Asset Management stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties ha...
Security Bulletin: IBM Maximo Mobile for EAM is vulnerable to Information Disclosure LDAP only (CVE-2023-43043)
Summary IBM Maximo Mobile for EAM could disclose sensitive information to a local user. Vulnerability Details CVEID:CVE-2023-43043 DESCRIPTION: IBM Maximo Application Suite - Maximo Mobile for EAM could disclose sensitive information to a local user. CVSS Base score: 5.1 CVSS Temporal Score: See:...
SKYSEA Client View Security Vulnerability
SKYSEA Client View is an enterprise IT asset management tool from SKY Japan. A security vulnerability exists in SKYSEA Client View versions Ver.11.220 through Ver.19.2, which stems from improper access control of a resident process...
SKYSEA Client View Security Vulnerability
SKYSEA Client View is an enterprise IT asset management tool from SKY Japan. A security vulnerability exists in SKYSEA Client View versions Ver.16.100 through Ver.19.2, which stems from improper access control of specific folders...
Security Bulletin: There is a vulnerability in Java on z/OS used by IBM Maximo Asset Management application (PSIRT-ADV0103951)
Summary There is a vulnerability in Java on z/OS used by IBM Maximo Asset Management application Vulnerability Details IBM X-Force ID: PSIRT-ADV0103951 DESCRIPTION: Created from Advisory: ADV0103951 CVSS Base score: 8.1 CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products a...
Security Bulletin: There is a vulnerability in Asset Data Dictionary used by IBM Maximo Asset Management application (CVE-2023-44487, CVE-2022-41881, CVE-2022-41915, CVE-2021-42550, CVE-2023-34462, CVE-2023-6481 and CVE-2023-6378)
Summary There is a vulnerability in Asset Data Dictionary used by IBM Maximo Asset Management application CVE-2023-44487, CVE-2022-41881, CVE-2022-41915, CVE-2021-42550, CVE-2023-34462, CVE-2023-6481 and CVE-2023-6378 Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: Multiple vendors are...
Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2024 - Includes Oracle January 2024 CPU plus CVE-2023-33850
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 that are used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for Utilities a...
IBM Maximo Asset Management Access Control Error Vulnerability
IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines IBM. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for...
Why keeping track of user accounts is important
CISA the Cybersecurity & Infrastructure Security Agency has issued a cybersecurity advisory after the discovery of documents containing host and user information of a state government organization’s network environment—including metadata—on a dark web brokerage site. An attacker managed to...
Security Bulletin: There is a vulnerability in tinymce-6.3.1.min.js used by IBM Maximo Asset Management application (CVE-2023-45819 and CVE-2023-45818)
Summary There is a vulnerability in tinymce-6.3.1.min.js used by IBM Maximo Asset Management application. Vulnerability Details CVEID:CVE-2023-45819 DESCRIPTION: TinyMCE is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the Notification Manager API. A...
