PT-2021-13968

Name of the Vulnerable Software and Affected Versions: IBM Maximo for Civil Infrastructure version 7.6.2 Description: The issue concerns executable functionality, such as a library, being included from a source outside of the intended control sphere. Recommendations: For IBM Maximo for Civil...

CVE-2021-20444: Improper Neutralization of Input During Web Page Generation

IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196620...

CVE-2021-20445: Insufficiently Protected Credentials

IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621...

PT-2021-13969

Name of the Vulnerable Software and Affected Versions: IBM Maximo for Civil Infrastructure version 7.6.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2021-13971

Name of the Vulnerable Software and Affected Versions: IBM Maximo for Civil Infrastructure version 7.6.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2021-20446: Improper Neutralization of Input During Web Page Generation

IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196622...

PT-2021-13970

Name of the Vulnerable Software and Affected Versions: IBM Maximo for Civil Infrastructure version 7.6.2 Description: The issue allows a user to obtain sensitive information due to insecure storage of authentication credentials. Recommendations: For IBM Maximo for Civil Infrastructure version...

CVE-2021-20443: Inclusion of Functionality from Untrusted Control Sphere

IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality such as a library from a source that is outside of the intended control sphere. IBM X-Force ID: 196619...