Maximo Asset Management@7.1.1 Security Vulnerabilities and Issues — Maximo Asset Management@7.1.1 CVE List

Lucene search

IbmMaximo Asset Management7.1.1

8 matches found

CVE•added 2017/04/24 6:59 a.m.•49 views

CVE-2015-0104

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote ...

8.8CVSS8.6AI score0.02037EPSS

CVE•added 2017/03/07 5:59 p.m.•48 views

CVE-2017-1124

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.

2.9CVSS3.5AI score0.00046EPSS

CVE•added 2017/04/24 6:59 a.m.•44 views

CVE-2015-0107

6.5CVSS6.6AI score0.07172EPSS

CVE•added 2017/07/05 5:29 p.m.•44 views

CVE-2017-1175

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297.

9.8CVSS9.3AI score0.00675EPSS

CVE•added 2017/07/05 5:29 p.m.•40 views

CVE-2017-1208

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1237...

5.4CVSS5.2AI score0.00269EPSS

CVE•added 2017/07/05 5:29 p.m.•35 views

CVE-2017-1176

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM X-Force ID: 123299.

3.3CVSS3.5AI score0.00054EPSS

CVE•added 2017/06/07 5:29 p.m.•34 views

CVE-2016-9977

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.

8.8CVSS8.4AI score0.01047EPSS

CVE•added 2017/06/08 9:29 p.m.•27 views

CVE-2016-8987

IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an authenticated user to view incorrect item sets that they should not have access to view.

4.3CVSS4.4AI score0.00212EPSS