Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:6.2.1:*:*:*:*:*:*:*

part: a version: 6.2.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3084 vulnerable 2026-06-08 05:05:31.042706 Details available
IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors.
Published: 2014-08-29T10:00:00.000Z
Updated: 2024-08-06T10:35:55.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3025 vulnerable 2026-06-08 05:05:30.744731 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via unspecified input to a .jsp file under webclient/utility/.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T10:28:46.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0915 vulnerable 2026-06-08 05:05:15.067022 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T09:27:20.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0914 vulnerable 2026-06-08 05:05:15.026573 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T09:27:20.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5395 vulnerable 2026-06-08 05:04:51.495365 Details available
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2013-10-01T10:00:00.000Z
Updated: 2024-08-06T17:06:52.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5383 vulnerable 2026-06-08 05:04:51.469515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5382 vulnerable 2026-06-08 05:04:51.468570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5381 vulnerable 2026-06-08 05:04:51.464676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5380 vulnerable 2026-06-08 05:04:51.457502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4027 vulnerable 2026-06-08 05:04:33.596472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4021 vulnerable 2026-06-08 05:04:33.578184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4020 vulnerable 2026-06-08 05:04:33.576977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4019 vulnerable 2026-06-08 05:04:33.575973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4018 vulnerable 2026-06-08 05:04:33.575316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4014 vulnerable 2026-06-08 05:04:33.556393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4013 vulnerable 2026-06-08 05:04:33.555471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3048 vulnerable 2026-06-08 05:04:30.003033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0451 vulnerable 2026-06-08 05:03:48.080680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6355 vulnerable 2026-06-08 05:03:00.010657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3327 vulnerable 2026-06-08 05:02:09.199186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3323 vulnerable 2026-06-08 05:02:09.177604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3322 vulnerable 2026-06-08 05:02:09.172814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3316 vulnerable 2026-06-08 05:02:09.142009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.