CVE-2012-6356

CVE-2012-6356 affects IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5. The vulnerability allows remote authenticated users to escalate privileges via vectors related to an import operation. The available sources (NVD entry and related recor...

CVE-2012-3321

IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password...

PT-2013-1595

Name of the Vulnerable Software and Affected Versions IBM SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved via vectors involving an expired password. Recommendations For IBM SmartCloud Control Desk...

PT-2013-1594

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Maximo Asset Management Essentials versions 6.2 through 7.5 Tivoli Asset Management for IT versions 6.2 through 7.2 Tivoli Service Request Manager versions 7.1 and 7.2 Maximo Service Des...

PT-2013-1598

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Maximo Asset Management Essentials versions 6.2 through 7.5 IBM Tivoli Asset Management for IT versions 6.2 through 7.2 IBM Tivoli Service Request Manager versions 7.1 and 7.2 IBM Maximo...

PT-2013-1931

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Maximo Asset Management Essentials versions 6.2 through 7.5 Tivoli Asset Management for IT versions 6.2 through 7.2 Tivoli Service Request Manager versions 7.1 and 7.2 Maximo Service Desk...

PT-2013-1932

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to gain privileges via vectors related to an import operatio...

CVE-2012-6356: Undefined Security Weakness

IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation...

CVE-2012-6357: Undefined Security Weakness

IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors...

CVE-2012-3321: Undefined Security Weakness

IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password...

CVE-2012-6355: Undefined Security Weakness

IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database CCMDB 7.1 and 7.2, and SmartCloud...

CVE-2012-3322: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management...

CVE-2013-0457: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid...

CVE-2012-3327: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management...

PT-2013-2352

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTM...

PT-2013-1933

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to gain privileges and bypass intended restrictions on...

CVE-2012-2183

Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to hijack web...

CVE-2012-0727

SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote authenticated users to execute arbitrary S...

CVE-2012-0746

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote authenticated users to inject...

CVE-2012-2184

Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to hijack web...