CVE-2013-5380

CVE-2013-5380 affects IBM Maximo Asset Management family: 6.2 (6.2.0–6.2.8), 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5. It enables local users to obtain sensitive information via unspecified vectors (information disclosure). The IBM security bulletin lists numerous product variants impacted and...

CVE-2013-3973

SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3971

IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049...

CVE-2013-3047

IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-4021

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors...

CVE-2013-0451

CVE-2013-0451 affects IBM Maximo Asset Management and related Maximo/Tivoli products (6.2.x, 7.1.x, 7.5.x) with a SQL Injection vulnerability. The connected IBM bulletin describes the flaw as SQL Injection (noted as IV24726 in APARs) in the List Page Description filter and related components, ena...

CVE-2013-3048

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3971

CVE-2013-3971 affects IBM Maximo Asset Management and related products (7.1–7.1.1.12 and 7.5 before 7.5.0.5). The bulletin indicates a security bypass vulnerability that allows remote authenticated users to bypass intended access restrictions via unspecified vectors. The issue is mitigated by app...

CVE-2013-4013

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-4019

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-5395

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2013-4027

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2013-5380

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive information via unspecified vectors...

CVE-2013-5383

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5382...

CVE-2013-4020

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors...

CVE-2013-4014

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-3048

CVE-2013-3048 is an XSS vulnerability in IBM Maximo Asset Management and related Maximo products across multiple releases (6.2.x to 7.5). The issue allows remote authenticated users to inject arbitrary web script/HTML via unspecified vectors due to a cross-site scripting flaw. IBM’s bulletin list...

CVE-2013-4014

CVE-2013-4014 is a cross-site scripting (XSS) vulnerability affecting IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM’s bulletin lists affected product...

CVE-2013-3972

IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-4021: Undefined Security Weakness

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors...