Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*

part: a version: 7.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management Essentials (7f979cfd-5ae6-5fba-98a5-cbb841154c50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9977 vulnerable 2026-06-08 05:08:25.155246 Details available
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 120253.
Published: 2017-06-07T17:00:00.000Z
Updated: 2024-08-06T03:07:31.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9976 vulnerable 2026-06-08 05:08:25.154111 Details available
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252.
Published: 2017-05-03T17:00:00.000Z
Updated: 2024-08-06T03:07:31.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7448 vulnerable 2026-06-08 05:07:01.003269 Details available
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Published: 2016-03-12T15:00:00.000Z
Updated: 2024-08-06T07:51:27.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5017 vulnerable 2026-06-08 05:06:48.588859 Details available
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended access restrictions and establish a login session by entering an expired password.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T06:32:32.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5016 vulnerable 2026-06-08 05:06:48.577123 Details available
IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460.
Published: 2018-03-27T17:00:00.000Z
Updated: 2024-08-06T06:32:31.899Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4967 vulnerable 2026-06-08 05:06:48.352869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4965 vulnerable 2026-06-08 05:06:48.326223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4944 vulnerable 2026-06-08 05:06:48.116348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1934 vulnerable 2026-06-08 05:06:26.914416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1933 vulnerable 2026-06-08 05:06:26.878686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0109 vulnerable 2026-06-08 05:06:13.532656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0108 vulnerable 2026-06-08 05:06:13.531853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0107 vulnerable 2026-06-08 05:06:13.531139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0104 vulnerable 2026-06-08 05:06:13.512441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6194 vulnerable 2026-06-08 05:05:56.757188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6102 vulnerable 2026-06-08 05:05:56.338364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4765 vulnerable 2026-06-08 05:05:45.824490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3025 vulnerable 2026-06-08 05:05:30.753005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0915 vulnerable 2026-06-08 05:05:15.067677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0914 vulnerable 2026-06-08 05:05:15.035763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5402 vulnerable 2026-06-08 05:04:51.512170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3323 vulnerable 2026-06-08 05:04:30.896121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3328 vulnerable 2026-06-08 05:02:09.207258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0195 vulnerable 2026-06-08 05:00:39.880886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4819 vulnerable 2026-06-08 04:59:33.113685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4818 vulnerable 2026-06-08 04:59:33.113133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4817 vulnerable 2026-06-08 04:59:33.112362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4816 vulnerable 2026-06-08 04:59:33.102532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1397 vulnerable 2026-06-08 04:57:58.817591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1396 vulnerable 2026-06-08 04:57:58.817006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1395 vulnerable 2026-06-08 04:57:58.816381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1394 vulnerable 2026-06-08 04:57:58.802463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.