Priority MEDIUM 48
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.06849 · Published 2017-04-24 · No fix listed CWE-284
Priority MEDIUM 47
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a m…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02868 · Published 2020-02-18 · No fix listed CWE-269
Priority LOW 38
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05956 · Published 2017-04-24 · No fix listed CWE-22
Priority LOW 34
Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Confi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02021 · Published 2012-09-10 · No fix listed
Priority LOW 33
Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Confi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01309 · Published 2012-09-10 · No fix listed
Priority LOW 32
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX001 for SmartCloud C…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01527 · Published 2015-11-08 · No fix listed CWE-255
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01047 · Published 2012-09-10 · No fix listed CWE-352
Priority LOW 31
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.00991 · Published 2015-10-05 · No fix listed CWE-89
Priority LOW 31
IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Des…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01231 · Published 2014-05-26 · No fix listed CWE-264
Priority LOW 31
SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01029 · Published 2014-05-26 · No fix listed CWE-89
Priority LOW 31
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.01231 · Published 2013-02-20 · No fix listed CWE-264
Priority LOW 31
SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configur…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0104 · Published 2012-09-10 · No fix listed CWE-89
Priority LOW 31
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configur…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0104 · Published 2012-09-10 · No fix listed CWE-89
Priority LOW 31
SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Manage…
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.0104 · Published 2012-09-10 · No fix listed CWE-89
Priority LOW 26
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 befo…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00707 · Published 2016-03-12 · No fix listed CWE-89
Priority LOW 26
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartClo…
CVSS 3.0MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00661 · Published 2016-01-03 · No fix listed CWE-284
Priority LOW 25
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Contr…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.00993 · Published 2015-10-04 · No fix listed CWE-310
Priority LOW 25
IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 and 7.2 for T…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01173 · Published 2014-10-02 · No fix listed CWE-200
Priority LOW 22
IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticat…
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00974 · Published 2018-03-27 · No fix listed CWE-200
Priority LOW 22
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allow…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.00931 · Published 2015-02-18 · No fix listed CWE-79
Priority LOW 22
Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 f…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01441 · Published 2015-02-17 · No fix listed CWE-22
Priority LOW 22
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01148 · Published 2013-02-20 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01148 · Published 2013-02-20 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configu…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01161 · Published 2012-09-10 · No fix listed CWE-79
Priority LOW 22
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01161 · Published 2012-09-10 · No fix listed CWE-79
Load more