Lucene search
+L

1851 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2021/08/19 7:04 p.m.24 views

Security Bulletin: IBM Maximo Asset Management is vulnerable to privilege escalation (CVE-2019-4449)

Summary IBM Maximo Asset Management could allow an authenticated user to escalate their permissions. Vulnerability Details CVEID: CVE-2019-4449 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to escalate their permissions. CVSS Base score: 5 CVSS Temporal Score: See: fo...

1.1AI score
SaveExploits0Affected Software8
OSV
OSV
added 2021/08/12 4:15 p.m.9 views

CVE-2021-20509

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243...

9.8CVSS6AI score0.01748EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/08/12 4:05 p.m.31 views

CVE-2021-20509

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243...

7CVSS9.4AI score0.01748EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/08/12 12:00 a.m.30 views

IBM Maximo Asset Management CSV Injection Vulnerability (CNVD-2021-88198)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. IBM Maximo Asse...

10CVSS9.8AI score0.01748EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2021/08/11 5:40 p.m.35 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2021-20579, CVE-2020-4945, CVE-2021-29777, CVE-2020-4885, CVE-2021-29703)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

8.1CVSS2.9AI score0.01692EPSS
SaveExploits0Affected Software12
IBM Security Bulletins
IBM Security Bulletins
added 2021/08/11 5:37 p.m.31 views

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2021-29702)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

7.5CVSS2.6AI score0.01884EPSS
SaveExploits0Affected Software12
ATTACKERKB
ATTACKERKB
added 2021/08/11 12:00 a.m.5 views

CVE-2021-20509

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243...

10CVSS7.6AI score0.01748EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/04 7:53 p.m.32 views

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - April 2021 - Includes Oracle April 2021 CPU minus CVE-2021-2163

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for...

2.9AI score0.03566EPSS
SaveExploits0Affected Software14
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/04 7:47 p.m.23 views

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4588)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

7.8CVSS0.7AI score0.00294EPSS
SaveExploits0Affected Software13
CNVD
CNVD
added 2021/05/20 12:00 a.m.13 views

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2021-36549)

IBM Maximo Asset Management is a comprehensive solution for asset-intensive industries to manage corporate physical assets through a common platform. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.6.0, 7.6.1. The vulnerability can be exploited by a user to...

6.5CVSS5.9AI score0.00515EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/18 12:00 a.m.9 views

IBM Maximo Asset Management 跨站脚本漏洞

IBM Maximo Asset Management is a comprehensive solution for asset-intensive industries to manage corporate physical assets through a common platform. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.6.0, 7.6.1. The vulnerability can be exploited by a user to...

6.5CVSS5.4AI score0.00515EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/16 7:25 p.m.23 views

Security Bulletin: Multiple security vulnerabilties have been identified in IBM DB2 shipped with IBM Maximo Asset Management

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

8.4CVSS1.7AI score0.02019EPSS
SaveExploits0Affected Software13
CNVD
CNVD
added 2021/03/16 12:00 a.m.24 views

Unspecified Vulnerability in IBM Maximo for Civil Infrastructure

IBM Maximo Anywhere is a suite of next-generation mobile solutions from IBM USA built on the IBM Worklight platform. The solution supports remote access to IBM Maximo Asset Management a comprehensive asset lifecycle and maintenance management solution workflow and asset management via mobile...

8.8CVSS6.7AI score0.00826EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/06 7:20 p.m.24 views

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2020-4642)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

6.2CVSS1.5AI score0.00365EPSS
SaveExploits0Affected Software13
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/06 7:14 p.m.31 views

Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology shipped with IBM Maximo Asset Management (CVE-2020-14781)

Summary CVE-2020-14781 was disclosed as part of the Oracle October 2020 Critical Patch Update. Java is used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for Utilitie...

4.3CVSS1.3AI score0.02324EPSS
SaveExploits0Affected Software14
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/19 2:44 p.m.33 views

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2020-4701 and CVE-2020-4739)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

8.4CVSS1.7AI score0.00474EPSS
SaveExploits0Affected Software19
CNVD
CNVD
added 2021/02/19 12:00 a.m.16 views

IBM Maximo for Civil Infrastructure Cross-Site Scripting Vulnerability

IBM Maximo for Civil Infrastructure integrates inspection, defect tracking and maintenance activities to help organizations improve asset life, keep critical systems up and running and reduce the total cost of ownership of civil infrastructure. A cross-site scripting vulnerability exists in IBM...

5.4CVSS6.1AI score0.00502EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/19 12:00 a.m.15 views

IBM Maximo for Civil Infrastructure Cross-Site Scripting Vulnerability (CNVD-2021-11050)

IBM Maximo for Civil Infrastructure integrates inspection, defect tracking and maintenance activities to help organizations improve asset life, keep critical systems up and running and reduce the total cost of ownership of civil infrastructure. A cross-site scripting vulnerability exists in IBM...

6.1CVSS6.1AI score0.00661EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/19 12:00 a.m.33 views

IBM Maximo for Civil Infrastructure Information Disclosure Vulnerability

IBM Maximo for Civil Infrastructure integrates inspection, defect tracking and maintenance activities to help organizations improve asset life, keep critical systems up and running and reduce the total cost of ownership of civil infrastructure. An information disclosure vulnerability exists in IB...

6.5CVSS6.2AI score0.01139EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/18 3:15 p.m.10 views

CVE-2021-20443

IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality such as a library from a source that is outside of the intended control sphere. IBM X-Force ID: 196619...

8.8CVSS5.8AI score0.00826EPSS
SaveExploits0References2
Rows per page
Query Builder