Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_service_desk:6.2:*:*:*:*:*:*:*

part: a version: 6.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Service Desk (a3f81a2f-4b0c-5166-bd0f-e59427f2f323)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3323 vulnerable 2026-06-08 05:04:30.910535 Details available
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.
Published: 2020-02-18T16:03:12.000Z
Updated: 2024-08-06T16:07:37.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6355 vulnerable 2026-06-08 05:03:00.025860 Details available
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T21:28:39.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3327 vulnerable 2026-06-08 05:02:09.200000 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to a login action.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T20:05:10.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3326 vulnerable 2026-06-08 05:02:09.198543 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-09-10T17:00:00.000Z
Updated: 2024-08-06T20:05:10.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3322 vulnerable 2026-06-08 05:02:09.173318 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a display name.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T20:05:10.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3316 vulnerable 2026-06-08 05:02:09.154989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3313 vulnerable 2026-06-08 05:02:09.127384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2185 vulnerable 2026-06-08 05:00:53.199718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2184 vulnerable 2026-06-08 05:00:53.199145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2183 vulnerable 2026-06-08 05:00:53.198583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0747 vulnerable 2026-06-08 05:00:44.714828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0746 vulnerable 2026-06-08 05:00:44.714230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0728 vulnerable 2026-06-08 05:00:44.645695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0727 vulnerable 2026-06-08 05:00:44.645120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0714 vulnerable 2026-06-08 05:00:44.599146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0195 vulnerable 2026-06-08 05:00:39.885689 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4817 vulnerable 2026-06-08 04:59:33.112516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4816 vulnerable 2026-06-08 04:59:33.109065 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1397 vulnerable 2026-06-08 04:57:58.817727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1394 vulnerable 2026-06-08 04:57:58.813009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.