PT-2019-10041 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6 Description: The issue allows an authenticated user to replace a target page with a phishing site, potentially enabling the attacker to obtain highly sensitive information. Recommendations: For IBM Maxi...

PT-2019-16868 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6 Description: The issue concerns the lack of file type validation upon upload in the Work Centers' application, allowing attackers to upload malicious files. Recommendations: For IBM Maximo Asset...

IBM Maximo Asset Management File Upload Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A file upload...

Security Bulletin: IBM Maximo Asset Management is vulnerable to Malicious File Upload attack (CVE-2019-4056)

Summary IBM Maximo Asset Management Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. Vulnerability Details CVEID: CVE-2019-4056 DESCRIPTION: IBM Maximo Asset Management Work Centers' application does not validate file type upon uploa...

Security Bulletin: IBM Maximo Asset Management is vulnerable to Reverse Tabnabbing (CVE-2018-2028)

Summary IBM Maximo Asset Management could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. Vulnerability Details CVEID: CVE-2018-2028 DESCRIPTION: IBM Maximo Asset Management could allow a an...

Security Bulletin: IBM Maximo Asset Management is vulnerable to Back and Refresh Attack (CVE-2019-4048)

Summary IBM Maximo Asset Management could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. Vulnerability Details CVEID: CVE-2019-4048 DESCRIPTION: IBM Maximo Asset Management could allow a physical user of the system to obtain sensitive...

A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4094)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-4094 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Serv...

A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1980 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Serv...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2018-1767)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Energy Optimization, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life...

Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL injection (CVE-2018-1699)

Summary IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2018-1699 DESCRIPTION: IBM Maximo...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2018-1977)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1977 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Serv...

User B cannot see a message notification in the Bulletins icon same as user A sees it.

Problem The issue is regarding bulletin board notification when you log into Maximo, a user has created a bulletin board and filled all the details. The Bulletin Board has been published. If another user logs into Maximo, he/she doesn't see the notification on the Bulletin Board icon instantly...

Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM Maximo Asset Management

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about security vulnerabilities affecting IBM DB2 have been published in security bulletins. Vulnerability Details CVEID: CVE-2018-1857 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server...

CVE-2018-1697

IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP request. IBM X-Force ID: 145966...

CVE-2018-1697

IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP request. IBM X-Force ID: 145966...

CVE-2018-1697

IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP request. IBM X-Force ID: 145966...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2018-25297)

BM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

CVE-2018-1584

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143497...

CVE-2018-1584

CVE-2018-1584 affects IBM Maximo Asset Management 7.6 core. Affected component: Web UI where cross-site scripting (XSS) can be injected, enabling arbitrary JavaScript execution that may lead to credentials disclosure within a trusted session. CVSSv3 base score 5.4 (MEDIUM). IBM’s bulletin lists a...

Cross site scripting

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143497...