Skip to content
OpenAdvisories
High · 8.8 CVE-2020-4521 EUVD-2020-25768GHSA-cggp-hg98-4chw

IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by …

Published Sep 15, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in Java. By sending specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 182396.

Affected products

VendorProductAffectedFixed
IBM Maximo Asset Management 7.6.0, 7.6.1 —

References