Versions
7.6
7.1.1
7.1.1.2
6.2.6
7.1.0.0
7.5.0.10
6.2.3
7.5.0.2
7.1.1.6
7.1, 7.5, 7.6
7.1
7.5.0.1
7.2
7.5.0.0
6.2.5
7.2.1
7.5.0.5
7.5
6.2.1
7.5.0.4
6.2.2
7.5.0
7.1.1.1
7.1.1.8
7.1.1.7
7.1.1.5
7.1.1.11
6.2.0.0
6.2.7
7.5.0.3
7.1.2
7.1.1.9
7.1, 7.1.1, 7.5, 7.6
7.6.0
6.2.8
6.2.4
6.2
7.1.1.10
7.1.1.12
Recent CVEs
CVE-2016-9976
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252.
CVE-2016-8924
IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier. An attacker could exploit this vulnerability to gain access to another user's session. IBM X-Force ID: 118537.
CVE-2017-1124
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM Reference #: 1998053.
CVE-2016-6072
IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2016-5896
IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.