IBM Maximo Asset Management

• CVE-2025-2986 Medium 5.5 IBM Maximo Asset Management cross-site scripting 0.2%
• CVE-2025-2987 Low 3.8 IBM Maximo Asset Management server-side request forgery 0.2%
• CVE-2024-45077 Medium 6.5 IBM Maximo Asset Management file upload 0.4%
• CVE-2024-45652 Medium 6.5 IBM Maximo Asset Management directory traversal 0.8%
• CVE-2024-45088 Medium 6.4 IBM Maximo Asset Management cross-site scripting 0.2%
• CVE-2024-22333 Low 3.3 IBM Maximo Application Suite information disclosure 0.2%
• CVE-2024-27266 High 8.2 IBM Maximo Application Suite XML external entity injection 0.8%
• CVE-2023-32335 Low 3.7 IBM Maximo Application Suite information disclosure 0.5%
• CVE-2023-38723 Medium 6.4 Maximo Asset Management cross-site scripting 0.3%
• CVE-2023-32333 Medium 6.5 IBM Maximo Asset Management improper access control 0.5%
• CVE-2023-47718 Medium 4.3 IBM Maximo Asset Management cross-site request forgery 0.3%
• CVE-2023-32332 Medium 5.4 IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection 0.6%
• CVE-2023-32334 Low 3.7 IBM Maximo Asset Management information disclosure 0.6%
• CVE-2022-43866 Medium 5.4 IBM Maximo Asset Management cross-site scripting 0.4%
• CVE-2023-27864 Medium 5.4 IBM Maximo Asset Management HTML injection 0.5%
• CVE-2023-27860 Medium 5.3 IBM Maximo Asset Management information disclosure 0.5%
• CVE-2022-35645 Medium 6.4 IBM Maximo Asset Management cross-site scripting 0.5%
• CVE-2022-41734 Medium 5.3 IBM Maximo Asset Management information disclosure 0.5%
• CVE-2022-35281 Medium 5.5 IBM Maximo Application Suite command injection 0.5%
• CVE-2022-40616 Medium 6.5 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 0.6%
• CVE-2021-38924 Medium 5.3 IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could 1.0%
• CVE-2022-35714 Medium 5.4 IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality poten 0.5%
• CVE-2021-29854 Medium 5.4 IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remot 1.1%
• CVE-2022-22436 Medium 5.4 IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot 0.5%
• CVE-2022-22435 Medium 5.4 IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot 0.5%
• CVE-2021-38935 Medium 5.9 IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 210892. 1.0%
• CVE-2021-29743 Medium 6.4 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu 0.5%
• CVE-2021-29744 Medium 5.4 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona 0.5%
• CVE-2021-20509 High 7.0 IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file cont 1.7%
• CVE-2021-20374 Medium 6.5 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended fu 0.5%
• CVE-2020-4493 Critical 9.8 IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command. IBM X-Force ID: 181995. 2.7%
• CVE-2020-4409 Medium 6.8 IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. By persuading a victim to visit a specially-crafted Web site, a remote 0.9%
• CVE-2020-4526 Medium 4.3 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the web 0.5%
• CVE-2020-4521 High 8.8 IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in Java. By sending specially-craft 6.5%
• CVE-2020-4463 High 8.2 IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose se 31.6%
• CVE-2020-4223 Medium 5.4 IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended func 0.6%
• CVE-2020-4529 High 7.3 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially lea 0.8%