2945 matches found
CVE-2013-3972
CVE-2013-3972 affects IBM Maximo Asset Management (and related Maximo offerings): versions 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 are vulnerable to an information-disclosure condition triggered by remote authenticated users via unspecified vectors. IBM’s consolidated bulletin shows the vulner...
CVE-2013-5383
CVE-2013-5383 affects IBM Maximo Asset Management and related products (7.5, 7.1, 6.2 families; including Essentials and various industry solutions) with remote authenticated privilege escalation via unspecified vectors. The IBM Security Flash (Sept 2013) enumerates affected releases and provides...
CVE-2013-3047
CVE-2013-3047 affects IBM Maximo Asset Management family: Maximo Asset Management 7.5, 7.1 (and related solutions) 7.1.1.0–7.1.1.11, 7.5.0.0–7.5.0.5; specifically 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allow remote authenticated users to gain privileges via unspecified vectors. The IBM X-FOCU...
CVE-2013-5380
CVE-2013-5380 affects IBM Maximo Asset Management family: 6.2 (6.2.0–6.2.8), 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5. It enables local users to obtain sensitive information via unspecified vectors (information disclosure). The IBM security bulletin lists numerous product variants impacted and...
CVE-2013-5382
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5383...
CVE-2013-0451
SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2012-3323
IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors...
CVE-2013-4018
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2013-4017
SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-3049
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971...
CVE-2013-4018
CVE-2013-4018 affects IBM Maximo Asset Management and related offerings: Maximo Asset Management 6.2–6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 are able to disclose sensitive information to remote authenticated users via unspecified vectors. The IBM flash bulletin and related advisories p...
CVE-2013-3049
CVE-2013-3049 affects IBM Maximo Asset Management and related IBM Tivoli/SmartCloud products. The vulnerability is a security bypass that could allow remote authenticated users to bypass intended access restrictions via unspecified vectors (a different issue from CVE-2013-3971). NVD records a CVS...
CVE-2013-0451
CVE-2013-0451 affects IBM Maximo Asset Management and related Maximo/Tivoli products (6.2.x, 7.1.x, 7.5.x) with a SQL Injection vulnerability. The connected IBM bulletin describes the flaw as SQL Injection (noted as IV24726 in APARs) in the List Page Description filter and related components, ena...
CVE-2013-5381
CVE-2013-5381 affects IBM Maximo Asset Management and related products. Affects: Maximo Asset Management 6.2 (6.2.0–6.2.8), 7.1 (up to 7.1.1.12), and 7.5 prior to 7.5.0.3. Description: remote authenticated users can gain privileges via unspecified vectors. No further technical exploit specifics a...
CVE-2013-5382
CVE-2013-5382 affects IBM Maximo Asset Management family (6.2–6.2.8, 7.1 before 7.1.1.12, 7.5 before 7.5.0.5). The vulnerability allows remote authenticated users to gain privileges via unspecified vectors (distinct from CVE-2013-5383). IBM’s vendor bulletin lists multiple APARs tied to this CVE ...
CVE-2013-5395
CVE-2013-5395 affects IBM Maximo Asset Management and related products. Affected: Maximo Asset Management 6.2–6.2.8; 7.1 before 7.1.1.12; 7.5 before 7.5.0.5. Issue: remote attackers can bypass intended access restrictions via unspecified vectors. Evidence: IBM Flash with detailed product list and...
CVE-2012-3323
CVE-2012-3323 affects IBM Maximo Asset Management and related Maximo products: 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3. The vulnerability allows remote attackers to gain privileges via unspecified vectors (CVSS v2 base score 6.8, vector AV:N/AC:M/Au:N/C:P/I:P/A:P). IBM’s sec...
CVE-2013-3971
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049...