Medium · 5.5 CVE-2022-35281 EUVD-2022-38171GHSA-rj5f-wj63-xvgc

IBM Maximo Application Suite command injection

Published Jan 6, 2023 · Updated Apr 9, 2025 · Assigned by ibm

Vendor: IBM Product: Maximo Asset Management Product: Maximo Manage

Description

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo Application Suite are vulnerable to CSV injection. IBM X-Force ID: 2306335.

Affected products

Vendor	Product	Affected	Fixed
IBM	Maximo Asset Management	7.6.1.1, 7.6.1.2, 7.6.1.3	—
IBM	Maximo Manage	8.3, 8.4	—

Advisories 1

WID-SEC-2023-0030 IBM Maximo Asset Management: Schwachstelle ermöglicht nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jan 5, 2023

References

https://www.ibm.com/support/pages/node/6852669 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/230635 vdb-entry