Maximo Asset Management Security Vulnerabilities and Issues — Maximo Asset Management CVE List

Lucene search

IbmMaximo Asset Management

9 matches found

CVE•added 2022/02/18 6:15 p.m.•83 views

CVE-2021-38935

IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 210892.

7.5CVSS7.3AI score0.00176EPSS

CVE•added 2022/05/03 7:15 p.m.•81 views

CVE-2021-29854

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attack...

7.2CVSS6.7AI score0.00057EPSS

CVE•added 2022/09/14 5:15 p.m.•55 views

CVE-2021-38924

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.

7.5CVSS7AI score0.00053EPSS

CVE•added 2023/02/17 6:15 p.m.•45 views

CVE-2022-41734

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 237587.

7.5CVSS5.8AI score0.00019EPSS

CVE•added 2020/06/08 1:15 p.m.•43 views

CVE-2020-4529

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 182713.

7.4CVSS7.1AI score0.00203EPSS

CVE•added 2020/07/13 2:15 p.m.•34 views

CVE-2019-4591

IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 167451.

7.8CVSS7.2AI score0.00036EPSS

CVE•added 2019/07/17 2:15 p.m.•33 views

CVE-2019-4430

IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162887.

7.5CVSS7.2AI score0.00533EPSS

CVE•added 2013/10/01 11:14 a.m.•32 views

CVE-2013-5395

IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors.

7.5CVSS6.8AI score0.0033EPSS

CVE•added 2024/03/13 10:15 a.m.•24 views

CVE-2023-32335

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

7.5CVSS3.6AI score0.00057EPSS