IBM Maximo Asset Management 7.6.1.3
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*
part: a version: 7.6.1.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Maximo Asset Management (ea4e4ac3-3b33-5764-8a2b-e6af03864f11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2987 |
vulnerable | 2026-06-08 07:16:58.780474 |
IBM Maximo Asset Management server-side request forgery
LOW (3.8)
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2025-04-21T23:24:30.724Z
Updated: 2025-09-01T00:40:33.105Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2986 |
vulnerable | 2026-06-08 07:16:58.780004 |
IBM Maximo Asset Management cross-site scripting
MEDIUM (5.5)
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-04-25T11:07:58.228Z
Updated: 2025-08-28T15:03:39.607Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45652 |
vulnerable | 2026-06-08 06:48:08.778404 |
IBM Maximo Asset Management directory traversal
MEDIUM (6.5)
IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Published: 2025-01-19T02:42:18.748Z
Updated: 2025-01-21T20:28:47.429Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45088 |
vulnerable | 2026-06-08 06:45:54.552942 |
IBM Maximo Asset Management cross-site scripting
MEDIUM (6.4)
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2024-11-11T16:01:25.382Z
Updated: 2024-11-11T17:54:23.187Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45077 |
vulnerable | 2026-06-08 06:45:54.534359 |
IBM Maximo Asset Management file upload
MEDIUM (6.5)
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system.
Published: 2025-01-24T15:38:03.611Z
Updated: 2025-02-12T20:01:19.525Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22333 |
vulnerable | 2026-06-08 06:29:34.567957 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47718 |
vulnerable | 2026-06-08 06:14:25.472602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32337 |
vulnerable | 2026-06-08 06:04:45.523991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32335 |
vulnerable | 2026-06-08 06:04:45.519772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32334 |
vulnerable | 2026-06-08 06:04:45.517482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32333 |
vulnerable | 2026-06-08 06:04:45.515365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32332 |
vulnerable | 2026-06-08 06:04:45.514911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27864 |
vulnerable | 2026-06-08 05:57:42.346933 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27860 |
vulnerable | 2026-06-08 05:57:42.341805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43866 |
vulnerable | 2026-06-08 05:49:34.907997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41734 |
vulnerable | 2026-06-08 05:48:30.883615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40616 |
vulnerable | 2026-06-08 05:48:27.717094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35645 |
vulnerable | 2026-06-08 05:46:05.061891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35281 |
vulnerable | 2026-06-08 05:46:04.525572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.