CVE-2013-2998

frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid actioncode...

CVE-2012-3333

CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL...

CVE-2012-3333

CVE-2012-3333 affects IBM Maximo Asset Management and SmartCloud Control Desk via a CRLF injection that allows HTTP header manipulation and HTTP response splitting through crafted URL parameters. Affected products include Maximo Asset Management and related variants across 7.5/7.1/6.2 lines and S...

CVE-2013-2998

CVE-2013-2998 affects IBM Maximo Asset Management and SmartCloud Control Desk. Vulnerability: information disclosure via frontcontroller.jsp when processing an invalid action_code, allowing remote authenticated users to obtain sensitive information. Affected products/versions include Maximo Asset...

PT-2014-2933

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1.1.7 before LAFIX.20140319-0837 IBM Maximo Asset Management versions 7.1.1.11 before IFIX.20140323-0749 IBM Maximo Asset Management versions 7.1.1.12 before IFIX.20140321-1336 IBM Maximo Asset Management...

PT-2014-2932

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.5.x before 7.5.0.3 IFIX027 IBM Maximo Asset Management version 7.5.0.4 before IFIX011 IBM Maximo Asset Management version 7.5.0.5 before IFIX006 SmartCloud Control Desk versions 7.x before 7.5.0.3...

PT-2014-2931

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.0.0 through 7.5.0.5 IBM SmartCloud Control Desk versions 7.0.0 through 7.5.0.2 IBM SmartCloud Control Desk versions 7.5.1.0 through 7.5.1.1 Description The issue allows remote authenticated users to bypas...

PT-2014-3926

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.5.x before 7.5.0.5 IFIX006 IBM SmartCloud Control Desk versions 7.x before 7.5.0.3 IBM SmartCloud Control Desk versions 7.5.1.x before 7.5.1.2 Description A cross-site scripting XSS issue exists, allowing...

PT-2014-3891

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.0.0 through 7.5.0.2 IBM SmartCloud Control Desk versions 7.0.0 through 7.5.0.2 IBM SmartCloud Control Desk versions 7.5.1.0 through 7.5.1.1 Description The issue allows remote authenticated users to gain...

PT-2014-3870

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.x before 7.1.1.12 IFIX.20140321-1336 IBM Maximo Asset Management versions 7.5.x before 7.5.0.5 IFIX006 SmartCloud Control Desk versions 7.x before 7.5.0.3 SmartCloud Control Desk versions 7.5.1.x before...

PT-2014-3185

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.0.0 through 7.1.1.7 before LAFIX.20140319-0837 IBM Maximo Asset Management versions 7.5.0.0 through 7.5.0.5 before IFIX006 SmartCloud Control Desk versions 7.0.0 through 7.5.0.3 SmartCloud Control Desk...

CVE-2013-5465: Undefined Security Weakness

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Manageme...

CVE-2013-5460: Undefined Security Weakness

IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors...

CVE-2013-5464: Undefined Security Weakness

IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated wit...

CVE-2014-0849: Undefined Security Weakness

IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups...

CVE-2014-0893: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters...

CVE-2012-3333: Undefined Security Weakness

CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL...

CVE-2013-2998: Exposure of Sensitive Information to an Unauthorized Actor

frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid actioncode...

CVE-2014-0825: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request...

PT-2014-2263

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.0.0 through 7.5.0.5 IBM SmartCloud Control Desk versions 7.0.0 through 7.5.0.2 IBM SmartCloud Control Desk versions 7.5.1.0 through 7.5.1.1 Description The issue allows remote attackers to inject arbitrar...