Skip to content
OpenAdvisories
Medium · 6.3 CVE-2018-1699 EUVD-2018-12278GHSA-vqcc-5772-mpf7

IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements…

Published Aug 24, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145968.

Affected products

VendorProductAffectedFixed
IBM Maximo Asset Management 7.6, 7.6.0, 7.6.0.1, 7.6.1, 7.6.2, 7.6.2.1, 7.6.2.2, 7.6.2.3, 7.6.2.4, 7.6.3 —

References