Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:7.6.1.1:*:*:*:*:*:*:*

part: a version: 7.6.1.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40616 vulnerable 2026-06-08 05:48:27.715655 Details available
MEDIUM (6.5)
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
Published: 2022-09-21T16:20:10.043Z
Updated: 2025-05-28T14:05:05.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35714 vulnerable 2026-06-08 05:46:05.178804 Details available
MEDIUM (5.4)
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231116.
Published: 2022-08-26T17:25:13.437Z
Updated: 2024-09-16T19:50:56.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35645 vulnerable 2026-06-08 05:46:05.061835 IBM Maximo Asset Management cross-site scripting
MEDIUM (6.4)
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230958.
Published: 2023-03-02T20:14:56.934Z
Updated: 2025-03-05T19:53:18.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35281 vulnerable 2026-06-08 05:46:04.523727 IBM Maximo Application Suite command injection
MEDIUM (5.5)
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo Application Suite are vulnerable to CSV injection. IBM X-Force ID: 2306335.
Published: 2023-01-06T16:50:24.699Z
Updated: 2025-04-09T13:54:57.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38924 vulnerable 2026-06-08 05:33:48.561452 Details available
MEDIUM (5.3)
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.
Published: 2022-09-14T16:20:11.857Z
Updated: 2024-09-16T18:08:57.450Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29854 vulnerable 2026-06-08 05:31:27.114767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4223 vulnerable 2026-06-08 05:25:59.022776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4749 vulnerable 2026-06-08 05:13:57.492578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4650 vulnerable 2026-06-08 05:13:57.378227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4644 vulnerable 2026-06-08 05:13:57.368108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4583 vulnerable 2026-06-08 05:13:57.327181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4530 vulnerable 2026-06-08 05:13:57.271796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4512 vulnerable 2026-06-08 05:13:57.254796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4478 vulnerable 2026-06-08 05:13:57.227875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4446 vulnerable 2026-06-08 05:13:57.186808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.