Maximo Anywhere

maximo_anywhere

Vendor: Ibm • 11 CVEs

CVEs (11)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-4352 1Ibm 1Maximo Anywhere Jun 17, 2026 Feb 16, 2022 N/A· v4 2.4 LOW· v3 2.1 LOW· v2 IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494.
CVE-2019-4351 1Ibm 1Maximo Anywhere Jun 17, 2026 Feb 16, 2022 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the device. IBM X-Force ID: 161493.
CVE-2019-4291 1Ibm 1Maximo Anywhere Jun 17, 2026 Feb 16, 2022 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697.
CVE-2019-4349 1Ibm 1Maximo Anywhere Jun 17, 2026 Nov 3, 2020 N/A· v4 3.5 LOW· v3 3.6 LOW· v2 IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 1...Show more IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486Show less
CVE-2019-4266 1Ibm 1Maximo Anywhere Jun 17, 2026 May 6, 2020 N/A· v4 2.4 LOW· v3 2.1 LOW· v2 IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160199.
CVE-2019-4288 1Ibm 1Maximo Anywhere Jun 17, 2026 Apr 29, 2020 N/A· v4 4.3 MEDIUM· v3 2.1 LOW· v2 IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631.
CVE-2019-4286 1Ibm 1Maximo Anywhere Jun 17, 2026 Apr 29, 2020 N/A· v4 4.3 MEDIUM· v3 2.1 LOW· v2 IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514.
CVE-2019-4429 1Ibm 10Control Desk Maximo AnywhereMaximo For Aviation+7 more Jun 17, 2026 Feb 19, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea...Show more IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162886.Show less
CVE-2019-4265 1Ibm 1Maximo Anywhere Jun 17, 2026 Oct 10, 2019 N/A· v4 2.4 LOW· v3 2.1 LOW· v2 IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.
CVE-2017-1604 1Ibm 1Maximo Anywhere Nov 21, 2024 Feb 21, 2018 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cred...Show more IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132851.Show less
CVE-2015-4945 1Ibm 1Maximo Anywhere May 6, 2026 Jul 26, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the IBM Maximo Anywhere application 7.5.1 through 7.5.1.2 for Android allows attackers to bypass a passcode protection mechanism and obtain sensitive information via a crafted application.