MA
Product
Maximo Asset Management
5
CVEs
0
On KEV
8.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add Maximo Asset Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9976 | 8.4 | May 3 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files Affected: 7.1, 7.5, 7.6 |
| CVE-2016-8924 | 5.6 | Apr 26 | IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier Affected: 7.1, 7.1.1, 7.5, 7.6 |
| CVE-2016-6072 | 5.4 | Feb 1 | IBM Maximo Asset Management is vulnerable to cross-site scripting Affected: 6.2; 7.1; 7.5; 7.5.0.0; 7.5.0.10; 7.1.0.0; +31 more |
| CVE-2016-5896 | 5.3 | Feb 1 | IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser Affected: 6.2; 7.1; 7.5; 7.5.0.0; 7.5.0.10; 7.1.0.0; +31 more |
| CVE-2017-1124 | 2.9 | Mar 7 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection Affected: 6.2; 7.1; 7.5; 7.5.0.0; 7.5.0.10; 7.1.0.0; +31 more |
Showing 5