IBM Maximo Asset Management 7.6.1.2
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:maximo_asset_management:7.6.1.2:*:*:*:*:*:*:*
part: a version: 7.6.1.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Maximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32334 |
vulnerable | 2026-06-08 06:04:45.517449 |
IBM Maximo Asset Management information disclosure
LOW (3.7)
IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255074.
Published: 2023-06-05T00:44:31.786Z
Updated: 2025-01-08T16:47:18.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32332 |
vulnerable | 2026-06-08 06:04:45.514051 |
IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection
MEDIUM (5.4)
IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 255072.
Published: 2023-09-08T19:55:17.970Z
Updated: 2024-09-26T14:13:16.283Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27864 |
vulnerable | 2026-06-08 05:57:42.346907 |
IBM Maximo Asset Management HTML injection
MEDIUM (5.4)
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 249327.
Published: 2023-04-28T17:01:04.242Z
Updated: 2025-01-30T19:24:51.336Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27860 |
vulnerable | 2026-06-08 05:57:42.340891 |
IBM Maximo Asset Management information disclosure
MEDIUM (5.3)
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This information could be used in further attacks against the system. IBM X-Force ID: 249207.
Published: 2023-04-27T18:59:24.744Z
Updated: 2025-01-30T20:48:54.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43866 |
vulnerable | 2026-06-08 05:49:34.907181 |
IBM Maximo Asset Management cross-site scripting
MEDIUM (5.4)
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239436.
Published: 2023-05-05T18:20:16.402Z
Updated: 2025-01-29T16:08:06.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41734 |
vulnerable | 2026-06-08 05:48:30.883479 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40616 |
vulnerable | 2026-06-08 05:48:27.716277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35714 |
vulnerable | 2026-06-08 05:46:05.178908 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35645 |
vulnerable | 2026-06-08 05:46:05.061866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35281 |
vulnerable | 2026-06-08 05:46:04.524574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22436 |
vulnerable | 2026-06-08 05:40:53.754605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22435 |
vulnerable | 2026-06-08 05:40:53.754144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38935 |
vulnerable | 2026-06-08 05:33:48.596889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38924 |
vulnerable | 2026-06-08 05:33:48.562451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29854 |
vulnerable | 2026-06-08 05:31:27.115373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.