CVE-2012-3321

IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password...

CVE-2012-6357

Technical details about CVE-2012-6357 are not publicly provided in the connected documents. The initial description lists affected IBM Maximo products but does not disclose vulnerability specifics, vectors, or remediation. Monitor for updates.

PT-2013-1595

Name of the Vulnerable Software and Affected Versions IBM SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to bypass intended access restrictions. This is achieved via vectors involving an expired password. Recommendations For IBM SmartCloud Control Desk...

PT-2013-2352

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTM...

PT-2013-1931

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 Maximo Asset Management Essentials versions 6.2 through 7.5 Tivoli Asset Management for IT versions 6.2 through 7.2 Tivoli Service Request Manager versions 7.1 and 7.2 Maximo Service Desk...

PT-2013-1932

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to gain privileges via vectors related to an import operatio...

CVE-2012-3327: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management...

CVE-2012-3321: Undefined Security Weakness

IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password...

CVE-2012-6355: Undefined Security Weakness

IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database CCMDB 7.1 and 7.2, and SmartCloud...

CVE-2012-3322: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management...

CVE-2012-6357: Undefined Security Weakness

IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors...

PT-2013-1933

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management version 7.5 IBM Maximo Asset Management Essentials version 7.5 SmartCloud Control Desk version 7.5 Description The issue allows remote authenticated users to gain privileges and bypass intended restrictions on...

CVE-2012-6356: Undefined Security Weakness

IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation...

PT-2013-1594

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Maximo Asset Management Essentials versions 6.2 through 7.5 Tivoli Asset Management for IT versions 6.2 through 7.2 Tivoli Service Request Manager versions 7.1 and 7.2 Maximo Service Des...

PT-2013-1598

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 6.2 through 7.5 IBM Maximo Asset Management Essentials versions 6.2 through 7.5 IBM Tivoli Asset Management for IT versions 6.2 through 7.2 IBM Tivoli Service Request Manager versions 7.1 and 7.2 IBM Maximo...

CVE-2013-0457: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid...

CVE-2012-0746

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote authenticated users to inject...

CVE-2012-2183

Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to hijack web...

CVE-2012-2184

Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote attackers to hijack web...

CVE-2012-0727

SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database CCMDB, allows remote authenticated users to execute arbitrary S...