Skip to content
OpenAdvisories

Product · IBM

Maximo Asset Management

86 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2024-27266

    IBM Maximo Application Suite XML external entity injection

    IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 28456…

    IBM Maximo Asset Management
  • High 7.0
    CVE-2021-20509

    IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute…

    IBM Maximo Asset Management
  • High 8.8
    CVE-2020-4521

    IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on th…

    IBM Maximo Asset Management
  • High 8.2
    CVE-2020-4463 Public exploit Scanner template EPSS 32%

    IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when pro…

    IBM Maximo Asset Management
  • High 7.3
    CVE-2020-4529

    IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an auth…

    IBM Maximo Asset Management
  • High 8.8
    CVE-2018-1524

    IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder coul…

    IBM Maximo Asset Management