Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

40 records

Vendor: IBM Component: Change And Configuration Management Database Clear all filters
TI-2013-02892 CVE-2013-3323 · GHSA-5h7g-4px8-37g8

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and…

Priority MEDIUM 47

A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a m…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02868 Published 2020-02-18 No fix listed CWE-269
TI-2015-04213 CVE-2015-5016 · GHSA-p4hm-3m49-2r96

IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and…

Priority LOW 22

IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticat…

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00974 Published 2018-03-27 No fix listed CWE-200
TI-2015-00099 CVE-2015-0107 · GHSA-p33x-cg95-phvw

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and…

Priority LOW 38

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.05956 Published 2017-04-24 No fix listed CWE-22
TI-2015-00096 CVE-2015-0104 · GHSA-p22g-469r-3wx4

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and…

Priority MEDIUM 48

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.06849 Published 2017-04-24 No fix listed CWE-284
TI-2015-06196 CVE-2015-7448 · GHSA-4283-cqg2-3qrc

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0…

Priority LOW 26

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 befo…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00707 Published 2016-03-12 No fix listed CWE-89
TI-2015-06226 CVE-2015-7487 · GHSA-rcmr-7j3j-9cfg

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0…

Priority LOW 19

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartClo…

CVSS 3.0MEDIUM 4.1 Local High privileges No interaction EPSS 0.00284 Published 2016-01-27 No fix listed CWE-200
TI-2015-04214 CVE-2015-5017 · GHSA-vvch-r9r8-hvpx

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0…

Priority LOW 26

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartClo…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00661 Published 2016-01-03 No fix listed CWE-284
TI-2015-04180 CVE-2015-4966 · GHSA-cvj4-pqcv-mvc9

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0…

Priority LOW 32

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX001 for SmartCloud C…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01527 Published 2015-11-08 No fix listed CWE-255
TI-2015-06146 CVE-2015-7395 · GHSA-qprw-mxrv-2qp7

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0…

Priority LOW 21

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 FP002 for SmartCloud C…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00963 Published 2015-11-08 No fix listed CWE-284
TI-2015-04181 CVE-2015-4967 · GHSA-3m7c-3p2c-qvvm

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0…

Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.00991 Published 2015-10-05 No fix listed CWE-89
TI-2015-04179 CVE-2015-4965 · GHSA-q8q4-hprv-7cg9

maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1…

Priority LOW 21

maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.00966 Published 2015-10-05 No fix listed CWE-200
TI-2015-04158 CVE-2015-4944 · GHSA-6634-4574-gm53

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX003 and 7.6.0…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00783 Published 2015-10-05 No fix listed CWE-79
TI-2015-01739 CVE-2015-1934 · GHSA-p5cc-4w4g-gw5p

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0…

Priority LOW 25

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Contr…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.00993 Published 2015-10-04 No fix listed CWE-310
TI-2015-00101 CVE-2015-0109 · GHSA-3c4f-jhr6-22q6

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allow…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00759 Published 2015-02-18 No fix listed CWE-79
TI-2015-00100 CVE-2015-0108 · GHSA-2357-2qjp-rwfg

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allow…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2015-02-18 No fix listed CWE-79
TI-2014-05112 CVE-2014-6194 · GHSA-p8gp-qfw9-99gr

Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset…

Priority LOW 22

Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 f…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01441 Published 2015-02-17 No fix listed CWE-22
TI-2014-00761 CVE-2014-0825 · GHSA-3j94-c55m-42mx

Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x be…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00936 Published 2014-05-26 No fix listed CWE-79
TI-2014-00760 CVE-2014-0824 · GHSA-hxgf-jcp9-6gh6

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli Service Request Manager,…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00936 Published 2014-05-26 No fix listed CWE-79
TI-2013-05555 CVE-2013-6741 · GHSA-2gvc-824f-4c6w

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before…

Priority LOW 19

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Se…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00951 Published 2014-05-26 No fix listed CWE-200
TI-2013-04664 CVE-2013-5465 · GHSA-w9pg-vq64-hmx5

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before…

Priority LOW 31

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Des…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01231 Published 2014-05-26 No fix listed CWE-264
TI-2013-03507 CVE-2013-4016 · GHSA-vf4v-jx55-rc4w

SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7…

Priority LOW 31

SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01029 Published 2014-05-26 No fix listed CWE-89
TI-2013-04612 CVE-2013-5402 · GHSA-23c4-jq8q-2m9j

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo fo…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2013-12-18 No fix listed CWE-79
Load more