Skip to content
OpenAdvisories
High · 7.0 CVE-2021-20509 EUVD-2021-7927GHSA-3633-56c2-jr9x

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands …

Published Aug 12, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Maximo Asset Management

Description

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243.

Affected products

VendorProductAffectedFixed
IBM Maximo Asset Management 7.6.0, 7.6.1 —

References