Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*

part: a version: 7.5.0.9 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1357 vulnerable 2026-06-08 05:09:21.870676 Details available
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-09-16T23:00:52.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1124 vulnerable 2026-06-08 05:09:13.030473 Details available
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.
Published: 2017-03-07T17:00:00.000Z
Updated: 2024-08-05T13:25:17.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5987 vulnerable 2026-06-08 05:07:58.342860 Details available
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-06T01:15:10.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5905 vulnerable 2026-06-08 05:07:58.075707 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.10 IF3 and 7.6 before 7.6.0.5 IF2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-06T01:15:09.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0399 vulnerable 2026-06-08 05:07:15.232588 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-07-02T14:00:00.000Z
Updated: 2024-08-05T22:15:24.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0393 vulnerable 2026-06-08 05:07:15.209714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0289 vulnerable 2026-06-08 05:07:14.893212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0262 vulnerable 2026-06-08 05:07:14.683540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7487 vulnerable 2026-06-08 05:07:01.125945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7448 vulnerable 2026-06-08 05:07:00.999248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7395 vulnerable 2026-06-08 05:07:00.643719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4966 vulnerable 2026-06-08 05:06:48.342122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.