CVE-2019-4056

Published: Jun 6, 2019Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565.

Affected (20)

Products: Ibm: Control Desk, Maximo Asset Management, Maximo For Aviation, Maximo For Life Sciences, Maximo For Nuclear Power, Maximo For Oil And Gas, Maximo For Transportation, Maximo For Utilities, Smartcloud Control Desk, Tivoli Integration Composer

Ibm

10 products

Control Desk

Maximo Asset Management

Maximo For Aviation

Maximo For Life Sciences

Maximo For Nuclear Power

Maximo For Oil And Gas

Maximo For Transportation

Maximo For Utilities

Smartcloud Control Desk

Tivoli Integration Composer

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Control Desk	Version 7.6.0.1
Ibm Control Desk	Version 7.6.0
Ibm Maximo Asset Management	Version 7.6
Ibm Maximo For Aviation	Version 7.6.1
Ibm Maximo For Aviation	Version 7.6.2.1
Ibm Maximo For Aviation	Version 7.6.2
Ibm Maximo For Aviation	Version 7.6.3
Ibm Maximo For Aviation	Version 7.6
Ibm Maximo For Life Sciences	Version 7.6
Ibm Maximo For Nuclear Power	Version 7.6.0
Ibm Maximo For Oil And Gas	Version 7.6.0
Ibm Maximo For Transportation	Version 7.6.1
Ibm Maximo For Transportation	Version 7.6.2.1
Ibm Maximo For Transportation	Version 7.6.2.2
Ibm Maximo For Transportation	Version 7.6.2.3
Ibm Maximo For Transportation	Version 7.6.2.4
Ibm Maximo For Transportation	Version 7.6.2
Ibm Maximo For Utilities	Version 7.6
Ibm Smartcloud Control Desk	All versions
Ibm Tivoli Integration Composer	All versions