VendorsIBMmaximo_asset_management7.6.1.2
Vulnerabilities

IBM Maximo Asset Management 7.6.1.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

15CVEs
CVE-2022-35281
IBM Maximo Application Suite command injection
Published 2023-01-06 · Modified
8.8EPSS 0.005
CVE-2022-40616
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
Published 2022-09-21 · Modified
8.1EPSS 0.006
CVE-2021-38935
IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 210892.
Published 2022-02-18 · Modified
7.5EPSS 0.010
CVE-2021-38924
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.
Published 2022-09-14 · Modified
7.5EPSS 0.010
CVE-2022-41734
IBM Maximo Asset Management information disclosure
Published 2023-02-17 · Modified
7.5EPSS 0.005
CVE-2021-29854
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 205680.
Published 2022-05-03 · Modified
7.2EPSS 0.011
CVE-2022-35645
IBM Maximo Asset Management cross-site scripting
Published 2023-03-02 · Modified
6.4EPSS 0.005
CVE-2023-32332
IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection
Published 2023-09-08 · Modified
5.4EPSS 0.006
CVE-2022-22435
IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published 2022-04-21 · Modified
5.4EPSS 0.005
CVE-2022-22436
IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224164.
Published 2022-04-21 · Modified
5.4EPSS 0.005
CVE-2023-27864
IBM Maximo Asset Management HTML injection
Published 2023-04-28 · Modified
5.4EPSS 0.005
CVE-2022-35714
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231116.
Published 2022-08-26 · Modified
5.4EPSS 0.005
CVE-2022-43866
IBM Maximo Asset Management cross-site scripting
Published 2023-05-05 · Modified
5.4EPSS 0.004
CVE-2023-32334
IBM Maximo Asset Management information disclosure
Published 2023-06-05 · Modified
5.3EPSS 0.006
CVE-2023-27860
IBM Maximo Asset Management information disclosure
Published 2023-04-27 · Modified
5.3EPSS 0.005