Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

40 records in Change And Configuration Management Database · all components

Priority MEDIUM 48

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.06849 Published 2017-04-24 No fix listed CWE-284
Priority MEDIUM 47

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02868 Published 2020-02-18 No fix listed CWE-269
Priority LOW 38

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05956 Published 2017-04-24 No fix listed CWE-22
Priority LOW 32

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX001 for SmartCloud C…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01527 Published 2015-11-08 No fix listed CWE-255
Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01047 Published 2012-09-10 No fix listed CWE-352
Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00991 Published 2015-10-05 No fix listed CWE-89
Priority LOW 31

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Des…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01231 Published 2014-05-26 No fix listed CWE-264
Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01029 Published 2014-05-26 No fix listed CWE-89
Priority LOW 31

IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01231 Published 2013-02-20 No fix listed CWE-264
Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configur…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0104 Published 2012-09-10 No fix listed CWE-89
Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configur…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0104 Published 2012-09-10 No fix listed CWE-89
Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Manage…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0104 Published 2012-09-10 No fix listed CWE-89
Priority LOW 26

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 befo…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00707 Published 2016-03-12 No fix listed CWE-89
Priority LOW 26

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartClo…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00661 Published 2016-01-03 No fix listed CWE-284
Priority LOW 25

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Contr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.00993 Published 2015-10-04 No fix listed CWE-310
Priority LOW 22

IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticat…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00974 Published 2018-03-27 No fix listed CWE-200
Priority LOW 22

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allow…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2015-02-18 No fix listed CWE-79
Priority LOW 22

Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 f…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01441 Published 2015-02-17 No fix listed CWE-22
Priority LOW 22

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-02-20 No fix listed CWE-79
Load more
Open these records in search →