Maximo Asset Management@7.6.1.3 Security Vulnerabilities and Issues — Maximo Asset Management@7.6.1.3 CVE List

Lucene search

IbmMaximo Asset Management7.6.1.3

8 matches found

CVE•added 2024/03/14 7:15 p.m.•69 views

CVE-2024-27266

IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 284566.

8.2CVSS8.1AI score0.0002EPSS

CVE•added 2024/11/11 4:15 p.m.•53 views

CVE-2024-45088

IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

6.4CVSS5.5AI score0.00075EPSS

CVE•added 2024/06/13 2:15 p.m.•51 views

CVE-2024-22333

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

3.3CVSS3.2AI score0.00022EPSS

CVE•added 2024/02/02 2:15 a.m.•43 views

CVE-2023-32333

IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access controls. IBM X-Force ID: 255073.

9.8CVSS8.9AI score0.00058EPSS

CVE•added 2024/03/13 10:15 a.m.•38 views

CVE-2023-38723

IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 262192...

6.4CVSS5.8AI score0.00068EPSS

CVE•added 2024/01/19 2:15 a.m.•34 views

CVE-2023-32337

IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 255288.

5.4CVSS5.3AI score0.00042EPSS

CVE•added 2024/01/19 2:15 a.m.•27 views

CVE-2023-47718

IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 271843.

8.8CVSS8.3AI score0.00042EPSS

CVE•added 2024/03/13 10:15 a.m.•24 views

CVE-2023-32335

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

7.5CVSS3.6AI score0.00077EPSS