CVE-2020-4651

Published: Nov 9, 2020Modified: Nov 21, 2024

4.8

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

IBM Maximo Spatial Asset Management 7.6.0.3, 7.6.0.4, 7.6.0.5, and 7.6.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 186024.

Affected (4)

Products: Ibm: Maximo Spatial Asset Management

Ibm

1 product

Maximo Spatial Asset Management

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Maximo Spatial Asset Management	Version 7.6.0.3
Ibm Maximo Spatial Asset Management	Version 7.6.0.4
Ibm Maximo Spatial Asset Management	Version 7.6.0.5
Ibm Maximo Spatial Asset Management	Version 7.6.1.0