Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.3:*:*:*:*:*:*:*

part: a version: 7.1.1.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1124 vulnerable 2026-06-08 05:09:13.017871 Details available
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.
Published: 2017-03-07T17:00:00.000Z
Updated: 2024-08-05T13:25:17.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5987 vulnerable 2026-06-08 05:07:58.336453 Details available
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-06T01:15:10.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0399 vulnerable 2026-06-08 05:07:15.225316 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-07-02T14:00:00.000Z
Updated: 2024-08-05T22:15:24.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0262 vulnerable 2026-06-08 05:07:14.678437 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 before 7.6.0.3 IFIX001 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-03-14T01:00:00.000Z
Updated: 2024-08-05T22:15:23.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.