← Back

Maximo Asset Management

maximo_asset_management

Vendor: Ibm • 182 CVEs

CVEs (182)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-4021
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors.
CVE-2013-4020
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
CVE-2013-4019
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-4018
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.0 MEDIUM· v2
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2013-4017
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2013-4014
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vector...Show more
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-4013
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2013-3973
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2013-3972
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2013-3971
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049.
CVE-2013-3049
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971.
CVE-2013-3048
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspeci...Show more
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-3047
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors.
CVE-2013-0451
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2012-3323
1Ibm
1Maximo Asset Management
Apr 29, 2026
Oct 1, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors.
CVE-2013-0457
1Ibm
3Maximo Asset Management
Maximo Asset Management EssentialsSmartcloud Control Desk
Apr 29, 2026
Feb 20, 2013
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTM...Show more
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid.Show less
CVE-2012-6357
1Ibm
3Maximo Asset Management
Maximo Asset Management EssentialsSmartcloud Control Desk
Apr 29, 2026
Feb 20, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via...Show more
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors.Show less
CVE-2012-6356
1Ibm
3Maximo Asset Management
Maximo Asset Management EssentialsSmartcloud Control Desk
Apr 29, 2026
Feb 20, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation.
CVE-2012-6355
1Ibm
7Change And Configuration Management Database
Maximo Asset ManagementMaximo Asset Management Essentials+4 more
Apr 29, 2026
Feb 20, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change...Show more
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.Show less
CVE-2012-3328
1Ibm
5Change And Configuration Management Database
Maximo Asset ManagementMaximo Asset Management Essentials+2 more
Apr 29, 2026
Feb 20, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and...Show more
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.Show less