# IBM Maximo Asset Management.

Every CVE that names IBM Maximo Asset Management among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Maximo Asset Management cross-site scripting](https://agentprime.io/advisories/CVE-2025-2986.md)
  `CVE-2025-2986` · CVE record: IBM Maximo Asset Management · CVSS 5.5 Medium · Not analysed yet · Published 25 Apr 2025 · Tags: Cross-site scripting (XSS)
- [IBM Maximo Asset Management server-side request forgery](https://agentprime.io/advisories/CVE-2025-2987.md)
  `CVE-2025-2987` · CVE record: IBM Maximo Asset Management · CVSS 3.8 Low · Not analysed yet · Published 21 Apr 2025 · Tags: Server-side request forgery (SSRF)
- [IBM Maximo Asset Management file upload](https://agentprime.io/advisories/CVE-2024-45077.md)
  `CVE-2024-45077` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 24 Jan 2025 · Tags: File inclusion
- [IBM Maximo Asset Management directory traversal](https://agentprime.io/advisories/CVE-2024-45652.md)
  `CVE-2024-45652` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2025 · Tags: Path traversal
- [IBM Maximo Asset Management cross-site scripting](https://agentprime.io/advisories/CVE-2024-45088.md)
  `CVE-2024-45088` · CVE record: IBM Maximo Asset Management · CVSS 6.4 Medium · Not analysed yet · Published 11 Nov 2024 · Tags: Cross-site scripting (XSS)
- [IBM Maximo Application Suite information disclosure](https://agentprime.io/advisories/CVE-2024-22333.md)
  `CVE-2024-22333` · CVE record: IBM Maximo Application Suite and 1 more · CVSS 3.3 Low · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-525
- [IBM Maximo Application Suite XML external entity injection](https://agentprime.io/advisories/CVE-2024-27266.md)
  `CVE-2024-27266` · CVE record: IBM Maximo Asset Management · CVSS 8.2 High · Not analysed yet · Published 14 Mar 2024 · Tags: XML external entities (XXE)
- [IBM Maximo Application Suite information disclosure](https://agentprime.io/advisories/CVE-2023-32335.md)
  `CVE-2023-32335` · CVE record: IBM Maximo Application Suite and 1 more · CVSS 3.7 Low · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-598
- [Maximo Asset Management cross-site scripting](https://agentprime.io/advisories/CVE-2023-38723.md)
  `CVE-2023-38723` · CVE record: IBM Maximo Asset Management · CVSS 6.4 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: Cross-site scripting (XSS)
- [IBM Maximo Asset Management improper access control](https://agentprime.io/advisories/CVE-2023-32333.md)
  `CVE-2023-32333` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 2 Feb 2024 · Tags: Broken access control
- [IBM Maximo Asset Management cross-site request forgery](https://agentprime.io/advisories/CVE-2023-47718.md)
  `CVE-2023-47718` · CVE record: IBM Maximo Asset Management and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 19 Jan 2024 · Tags: Cross-site request forgery (CSRF)
- [IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection](https://agentprime.io/advisories/CVE-2023-32332.md)
  `CVE-2023-32332` · CVE record: IBM Maximo Asset Management and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Sept 2023
- [IBM Maximo Asset Management information disclosure](https://agentprime.io/advisories/CVE-2023-32334.md)
  `CVE-2023-32334` · CVE record: IBM Maximo Asset Management and 1 more · CVSS 3.7 Low · Not analysed yet · Published 5 Jun 2023
- [IBM Maximo Asset Management cross-site scripting](https://agentprime.io/advisories/CVE-2022-43866.md)
  `CVE-2022-43866` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 5 May 2023 · Tags: Cross-site scripting (XSS)
- [IBM Maximo Asset Management HTML injection](https://agentprime.io/advisories/CVE-2023-27864.md)
  `CVE-2023-27864` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 28 Apr 2023
- [IBM Maximo Asset Management information disclosure](https://agentprime.io/advisories/CVE-2023-27860.md)
  `CVE-2023-27860` · CVE record: IBM Maximo Asset Management · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2023 · Tags: Information disclosure
- [IBM Maximo Asset Management cross-site scripting](https://agentprime.io/advisories/CVE-2022-35645.md)
  `CVE-2022-35645` · CVE record: IBM Maximo Asset Management and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 2 Mar 2023 · Tags: Cross-site scripting (XSS)
- [IBM Maximo Asset Management information disclosure](https://agentprime.io/advisories/CVE-2022-41734.md)
  `CVE-2022-41734` · CVE record: IBM Maximo Asset Management · CVSS 5.3 Medium · Not analysed yet · Published 17 Feb 2023 · Tags: Information disclosure
- [IBM Maximo Application Suite command injection](https://agentprime.io/advisories/CVE-2022-35281.md)
  `CVE-2022-35281` · CVE record: IBM Maximo Asset Management and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Jan 2023 · Tags: Other injection
- [Improper authentication in IBM Maximo Asset Management](https://agentprime.io/advisories/CVE-2022-40616.md)
  `CVE-2022-40616` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2022 · Tags: Authentication bypass
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2021-38924.md)
  `CVE-2021-38924` · CVE record: IBM Maximo Asset Management · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2022
- [IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-35714.md)
  `CVE-2022-35714` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 26 Aug 2022
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection…](https://agentprime.io/advisories/CVE-2021-29854.md)
  `CVE-2021-29854` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2022
- [IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22436.md)
  `CVE-2022-22436` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 21 Apr 2022
- [IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22435.md)
  `CVE-2022-22435` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 21 Apr 2022
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong…](https://agentprime.io/advisories/CVE-2021-38935.md)
  `CVE-2021-38935` · CVE record: IBM Maximo Asset Management · CVSS 5.9 Medium · Not analysed yet · Published 18 Feb 2022
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29743.md)
  `CVE-2021-29743` · CVE record: IBM Maximo Asset Management · CVSS 6.4 Medium · Not analysed yet · Published 30 Aug 2021
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29744.md)
  `CVE-2021-29744` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 27 Aug 2021
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection.](https://agentprime.io/advisories/CVE-2021-20509.md)
  `CVE-2021-20509` · CVE record: IBM Maximo Asset Management · CVSS 7.0 High · Not analysed yet · Published 12 Aug 2021
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20374.md)
  `CVE-2021-20374` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 19 May 2021
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass…](https://agentprime.io/advisories/CVE-2020-4493.md)
  `CVE-2020-4493` · CVE record: IBM Maximo Asset Management · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct…](https://agentprime.io/advisories/CVE-2020-4409.md)
  `CVE-2020-4409` · CVE record: IBM Maximo Asset Management · CVSS 6.8 Medium · Not analysed yet · Published 16 Sept 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery…](https://agentprime.io/advisories/CVE-2020-4526.md)
  `CVE-2020-4526` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 15 Sept 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker…](https://agentprime.io/advisories/CVE-2020-4521.md)
  `CVE-2020-4521` · CVE record: IBM Maximo Asset Management · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2020
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2019-4671.md)
  `CVE-2019-4671` · CVE record: IBM Maximo Asset Management · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse…](https://agentprime.io/advisories/CVE-2019-4582.md)
  `CVE-2019-4582` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity…](https://agentprime.io/advisories/CVE-2020-4463.md)
  `CVE-2020-4463` · CVE record: IBM Maximo Asset Management · CVSS 8.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.32 · Not analysed yet · Published 29 Jul 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout…](https://agentprime.io/advisories/CVE-2019-4591.md)
  `CVE-2019-4591` · CVE record: IBM Maximo Asset Management · CVSS 5.9 Medium · Not analysed yet · Published 13 Jul 2020
- [IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4223.md)
  `CVE-2020-4223` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 26 Jun 2020
- [IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection.](https://agentprime.io/advisories/CVE-2019-4650.md)
  `CVE-2019-4650` · CVE record: IBM Maximo Asset Management · CVSS 6.3 Medium · Not analysed yet · Published 26 Jun 2020
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2020-4529.md)
  `CVE-2020-4529` · CVE record: IBM Maximo Asset Management · CVSS 7.3 High · Not analysed yet · Published 8 Jun 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain…](https://agentprime.io/advisories/CVE-2019-4478.md)
  `CVE-2019-4478` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2020
- [IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4749.md)
  `CVE-2019-4749` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 17 Apr 2020
- [IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4644.md)
  `CVE-2019-4644` · CVE record: IBM Maximo Asset Management · CVSS 6.1 Medium · Not analysed yet · Published 17 Apr 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they…](https://agentprime.io/advisories/CVE-2019-4446.md)
  `CVE-2019-4446` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 17 Apr 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive…](https://agentprime.io/advisories/CVE-2019-4745.md)
  `CVE-2019-4745` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 24 Feb 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to…](https://agentprime.io/advisories/CVE-2019-4583.md)
  `CVE-2019-4583` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 20 Feb 2020
- [IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4429.md)
  `CVE-2019-4429` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 19 Feb 2020
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6, 7.6.1…](https://agentprime.io/advisories/CVE-2019-4530.md)
  `CVE-2019-4530` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 20 Nov 2019
- [IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4486.md)
  `CVE-2019-4486` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 24 Oct 2019
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive…](https://agentprime.io/advisories/CVE-2019-4512.md)
  `CVE-2019-4512` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 9 Oct 2019
- [IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system.](https://agentprime.io/advisories/CVE-2019-4430.md)
  `CVE-2019-4430` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 17 Jul 2019
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 is vulnerable to CSV injection…](https://agentprime.io/advisories/CVE-2019-4364.md)
  `CVE-2019-4364` · CVE record: IBM Maximo Asset Management · CVSS 5.5 Medium · Not analysed yet · Published 19 Jun 2019
- [IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4303.md)
  `CVE-2019-4303` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 19 Jun 2019
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type…](https://agentprime.io/advisories/CVE-2019-4056.md)
  `CVE-2019-4056` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 6 Jun 2019
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain…](https://agentprime.io/advisories/CVE-2019-4048.md)
  `CVE-2019-4048` · CVE record: IBM Maximo Asset Management · CVSS 2.1 Low · Not analysed yet · Published 6 Jun 2019
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target…](https://agentprime.io/advisories/CVE-2018-2028.md)
  `CVE-2018-2028` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 6 Jun 2019
- [IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames…](https://agentprime.io/advisories/CVE-2018-1697.md)
  `CVE-2018-1697` · CVE record: IBM Maximo Asset Management · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2018
- [IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1584.md)
  `CVE-2018-1584` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 28 Nov 2018
- [IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1872.md)
  `CVE-2018-1872` · CVE record: IBM Maximo Asset Management · CVSS 5.4 Medium · Not analysed yet · Published 9 Nov 2018

Older: <https://agentprime.io/advisories/technology/ibm-maximo-asset-management.md?cursor=WyIyMDE4LTExLTA5VDE3OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xODcyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-maximo-asset-management>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-maximo-asset-management/>. Everything for agents: <https://agentprime.io/llms.txt>.