CVE-2013-4013

CVE-2013-4013 affects IBM Maximo Asset Management and related Maximo offerings. Affects: Maximo Asset Management 6.2.x (6.2.0–6.2.8), 7.1.x (7.1.0–7.1.1.12), and 7.5 (before 7.5.0.2). Issue: information disclosure via unspecified vectors that allow remote attackers to obtain sensitive data. CVSS ...

CVE-2013-4018

CVE-2013-4018 affects IBM Maximo Asset Management and related offerings: Maximo Asset Management 6.2–6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 are able to disclose sensitive information to remote authenticated users via unspecified vectors. The IBM flash bulletin and related advisories p...

CVE-2013-5383

CVE-2013-5383 affects IBM Maximo Asset Management and related products (7.5, 7.1, 6.2 families; including Essentials and various industry solutions) with remote authenticated privilege escalation via unspecified vectors. The IBM Security Flash (Sept 2013) enumerates affected releases and provides...

CVE-2013-5380

CVE-2013-5380 affects IBM Maximo Asset Management family: 6.2 (6.2.0–6.2.8), 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5. It enables local users to obtain sensitive information via unspecified vectors (information disclosure). The IBM security bulletin lists numerous product variants impacted and...

CVE-2013-0451

CVE-2013-0451 affects IBM Maximo Asset Management and related Maximo/Tivoli products (6.2.x, 7.1.x, 7.5.x) with a SQL Injection vulnerability. The connected IBM bulletin describes the flaw as SQL Injection (noted as IV24726 in APARs) in the List Page Description filter and related components, ena...

CVE-2013-3049

CVE-2013-3049 affects IBM Maximo Asset Management and related IBM Tivoli/SmartCloud products. The vulnerability is a security bypass that could allow remote authenticated users to bypass intended access restrictions via unspecified vectors (a different issue from CVE-2013-3971). NVD records a CVS...

CVE-2013-5382

CVE-2013-5382 affects IBM Maximo Asset Management family (6.2–6.2.8, 7.1 before 7.1.1.12, 7.5 before 7.5.0.5). The vulnerability allows remote authenticated users to gain privileges via unspecified vectors (distinct from CVE-2013-5383). IBM’s vendor bulletin lists multiple APARs tied to this CVE ...

CVE-2012-3323

CVE-2012-3323 affects IBM Maximo Asset Management and related Maximo products: 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3. The vulnerability allows remote attackers to gain privileges via unspecified vectors (CVSS v2 base score 6.8, vector AV:N/AC:M/Au:N/C:P/I:P/A:P). IBM’s sec...

CVE-2013-3973

SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-5395

CVE-2013-5395 affects IBM Maximo Asset Management and related products. Affected: Maximo Asset Management 6.2–6.2.8; 7.1 before 7.1.1.12; 7.5 before 7.5.0.5. Issue: remote attackers can bypass intended access restrictions via unspecified vectors. Evidence: IBM Flash with detailed product list and...

CVE-2013-3971

IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049...

CVE-2013-3047

IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-4021

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors...

CVE-2013-5381

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-5381

CVE-2013-5381 affects IBM Maximo Asset Management and related products. Affects: Maximo Asset Management 6.2 (6.2.0–6.2.8), 7.1 (up to 7.1.1.12), and 7.5 prior to 7.5.0.3. Description: remote authenticated users can gain privileges via unspecified vectors. No further technical exploit specifics a...

CVE-2013-3048

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4013

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2013-3972

IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2013-5395

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2013-4014

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...