Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:6.2.2:*:*:*:*:*:*:*

part: a version: 6.2.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3084 vulnerable 2026-06-08 05:05:31.042728 Details available
IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors.
Published: 2014-08-29T10:00:00.000Z
Updated: 2024-08-06T10:35:55.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3025 vulnerable 2026-06-08 05:05:30.745278 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via unspecified input to a .jsp file under webclient/utility/.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T10:28:46.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0915 vulnerable 2026-06-08 05:05:15.067042 Details available
Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.2, and 7.2 for Tivoli Asset Management for IT and certain other products allow remote authenticated users to inject arbitrary web script or HTML via (1) the KPI display name field or (2) a portlet field.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T09:27:20.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0914 vulnerable 2026-06-08 05:05:15.027085 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 6.2 through 6.2.8 for Tivoli IT Asset Management for IT and Maximo Service Desk allows remote authenticated users to inject arbitrary web script or HTML via the Query Description Field.
Published: 2014-07-30T10:00:00.000Z
Updated: 2024-08-06T09:27:20.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5395 vulnerable 2026-06-08 05:04:51.495381 Details available
IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors.
Published: 2013-10-01T10:00:00.000Z
Updated: 2024-08-06T17:06:52.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5383 vulnerable 2026-06-08 05:04:51.469533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5382 vulnerable 2026-06-08 05:04:51.468588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5381 vulnerable 2026-06-08 05:04:51.464695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5380 vulnerable 2026-06-08 05:04:51.457983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4027 vulnerable 2026-06-08 05:04:33.596489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4021 vulnerable 2026-06-08 05:04:33.578201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4020 vulnerable 2026-06-08 05:04:33.576993 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4019 vulnerable 2026-06-08 05:04:33.575991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4018 vulnerable 2026-06-08 05:04:33.575332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4014 vulnerable 2026-06-08 05:04:33.556409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4013 vulnerable 2026-06-08 05:04:33.555487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3048 vulnerable 2026-06-08 05:04:30.003715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0451 vulnerable 2026-06-08 05:03:48.081260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6355 vulnerable 2026-06-08 05:03:00.011167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3327 vulnerable 2026-06-08 05:02:09.199203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3323 vulnerable 2026-06-08 05:02:09.177624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3322 vulnerable 2026-06-08 05:02:09.172834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3316 vulnerable 2026-06-08 05:02:09.142532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.