Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:maximo_asset_management:7.1.2:*:*:*:*:*:*:*

part: a version: 7.1.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductMaximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1124 vulnerable 2026-06-08 05:09:13.023521 Details available
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.
Published: 2017-03-07T17:00:00.000Z
Updated: 2024-08-05T13:25:17.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5987 vulnerable 2026-06-08 05:07:58.342646 Details available
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sensitive information via a crafted HTTP request that triggers construction of a runtime error message.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-06T01:15:10.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0399 vulnerable 2026-06-08 05:07:15.232277 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-07-02T14:00:00.000Z
Updated: 2024-08-05T22:15:24.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6194 vulnerable 2026-06-08 05:05:56.757022 Details available
Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to read arbitrary files via a .. (dot dot) in a pathname.
Published: 2015-02-17T01:00:00.000Z
Updated: 2024-08-06T12:10:12.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6102 vulnerable 2026-06-08 05:05:56.333333 Details available
IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products do not properly handle logout actions, which allows remote attackers to bypass intended Cognos BI Direct Integration access restrictions by leveraging an unattended workstation.
Published: 2015-02-17T01:00:00.000Z
Updated: 2024-08-06T12:03:02.424Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4765 vulnerable 2026-06-08 05:05:45.819531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3084 vulnerable 2026-06-08 05:05:31.046369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3025 vulnerable 2026-06-08 05:05:30.749084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3024 vulnerable 2026-06-08 05:05:30.738803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0915 vulnerable 2026-06-08 05:05:15.067494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0914 vulnerable 2026-06-08 05:05:15.031097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0849 vulnerable 2026-06-08 05:05:14.723011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5460 vulnerable 2026-06-08 05:04:51.740300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5402 vulnerable 2026-06-08 05:04:51.510529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2998 vulnerable 2026-06-08 05:04:29.789898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3333 vulnerable 2026-06-08 05:02:09.228970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.