GCVE - cpe:2.3:a:ibm:tivoli_integration_composer:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_integration_composer:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Tivoli Integration Composer (`2f0bd9b5-25dc-5b3f-851a-4de9f0b7fac3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-4512`	vulnerable	2026-06-08 05:13:57.255412	Details available MEDIUM (4.3) IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554. Published: 2019-10-09T15:00:23.883Z Updated: 2024-09-17T02:36:34.215Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/1075413 https://exchange.xforce.ibmcloud.com/vulnerabilities/164554	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4364`	vulnerable	2026-06-08 05:13:57.099828	Details available MEDIUM (5.5) IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 161680. Published: 2019-06-19T13:30:19.753Z Updated: 2024-09-16T18:39:05.036Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10887557 https://exchange.xforce.ibmcloud.com/vulnerabilities/161680 http://www.securityfocus.com/bid/108910	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4303`	vulnerable	2026-06-08 05:13:57.058565	Details available MEDIUM (5.4) IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 160949. Published: 2019-06-19T13:30:19.709Z Updated: 2024-09-16T23:00:36.112Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10887563 https://exchange.xforce.ibmcloud.com/vulnerabilities/160949 http://www.securityfocus.com/bid/108912	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4056`	vulnerable	2026-06-08 05:13:56.755717	Details available MEDIUM (4.3) IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565. Published: 2019-06-06T00:35:18.806Z Updated: 2024-09-16T17:34:20.207Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880149 https://exchange.xforce.ibmcloud.com/vulnerabilities/156565	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4048`	vulnerable	2026-06-08 05:13:56.744438	Details available LOW (2.1) IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. IBM X-Force ID: 156311. Published: 2019-06-06T00:35:18.759Z Updated: 2024-09-16T17:59:00.803Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880147 https://exchange.xforce.ibmcloud.com/vulnerabilities/156311	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-2028`	vulnerable	2026-06-08 05:11:29.978987	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6072`	vulnerable	2026-06-08 05:07:58.765917	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.