Advisories · Technology

IBM Maximo Asset Management.

Every CVE that names IBM Maximo Asset Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-2986 CVE record

CVSS 5.5 Medium

IBM Maximo Asset Management cross-site scripting
- IBM Maximo Asset Management
- Cross-site scripting (XSS)
Not analysed yet 25 Apr 2025
CVE-2025-2987 CVE record

CVSS 3.8 Low

IBM Maximo Asset Management server-side request forgery
- IBM Maximo Asset Management
- Server-side request forgery (SSRF)
Not analysed yet 21 Apr 2025
CVE-2024-45077 CVE record

CVSS 6.5 Medium

IBM Maximo Asset Management file upload
- IBM Maximo Asset Management
- File inclusion
Not analysed yet 24 Jan 2025
CVE-2024-45652 CVE record

CVSS 6.5 Medium

IBM Maximo Asset Management directory traversal
- IBM Maximo Asset Management
- Path traversal
Not analysed yet 19 Jan 2025
CVE-2024-45088 CVE record

CVSS 6.4 Medium

IBM Maximo Asset Management cross-site scripting
- IBM Maximo Asset Management
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2024
CVE-2024-22333 CVE record

CVSS 3.3 Low

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- IBM Maximo Asset Management
- CWE-525
Not analysed yet 13 Jun 2024
CVE-2024-27266 CVE record

CVSS 8.2 High

IBM Maximo Application Suite XML external entity injection
- IBM Maximo Asset Management
- XML external entities (XXE)
Not analysed yet 14 Mar 2024
CVE-2023-32335 CVE record

CVSS 3.7 Low

IBM Maximo Application Suite information disclosure
- IBM Maximo Application Suite
- IBM Maximo Asset Management
- CWE-598
Not analysed yet 13 Mar 2024
CVE-2023-38723 CVE record

CVSS 6.4 Medium

Maximo Asset Management cross-site scripting
- IBM Maximo Asset Management
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2023-32333 CVE record

CVSS 6.5 Medium

IBM Maximo Asset Management improper access control
- IBM Maximo Asset Management
- Broken access control
Not analysed yet 2 Feb 2024
CVE-2023-47718 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management cross-site request forgery
- IBM Maximo Asset Management
- IBM Maximo Asset Management Manage Component
- Cross-site request forgery (CSRF)
Not analysed yet 19 Jan 2024
CVE-2023-32332 CVE record

CVSS 5.4 Medium

IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection
- IBM Maximo Asset Management
- IBM Maximo Application Suite
Not analysed yet 8 Sept 2023
CVE-2023-32334 CVE record

CVSS 3.7 Low

IBM Maximo Asset Management information disclosure
- IBM Maximo Asset Management
- IBM Maximo Application Suite
Not analysed yet 5 Jun 2023
CVE-2022-43866 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management cross-site scripting
- IBM Maximo Asset Management
- Cross-site scripting (XSS)
Not analysed yet 5 May 2023
CVE-2023-27864 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management HTML injection
- IBM Maximo Asset Management
Not analysed yet 28 Apr 2023
CVE-2023-27860 CVE record

CVSS 5.3 Medium

IBM Maximo Asset Management information disclosure
- IBM Maximo Asset Management
- Information disclosure
Not analysed yet 27 Apr 2023
CVE-2022-35645 CVE record

CVSS 6.4 Medium

IBM Maximo Asset Management cross-site scripting
- IBM Maximo Asset Management
- IBM Maximo Application Suite
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2022-41734 CVE record

CVSS 5.3 Medium

IBM Maximo Asset Management information disclosure
- IBM Maximo Asset Management
- Information disclosure
Not analysed yet 17 Feb 2023
CVE-2022-35281 CVE record

CVSS 5.5 Medium

IBM Maximo Application Suite command injection
- IBM Maximo Asset Management
- IBM Maximo Manage
- Other injection
Not analysed yet 6 Jan 2023
CVE-2022-40616 CVE record

CVSS 6.5 Medium

Improper authentication in IBM Maximo Asset Management
- IBM Maximo Asset Management
- Authentication bypass
Not analysed yet 21 Sept 2022
CVE-2021-38924 CVE record

CVSS 5.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain…
- IBM Maximo Asset Management
Not analysed yet 14 Sept 2022
CVE-2022-35714 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 26 Aug 2022
CVE-2021-29854 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection…
- IBM Maximo Asset Management
Not analysed yet 3 May 2022
CVE-2022-22436 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 21 Apr 2022
CVE-2022-22435 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 21 Apr 2022
CVE-2021-38935 CVE record

CVSS 5.9 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong…
- IBM Maximo Asset Management
Not analysed yet 18 Feb 2022
CVE-2021-29743 CVE record

CVSS 6.4 Medium

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 30 Aug 2021
CVE-2021-29744 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 27 Aug 2021
CVE-2021-20509 CVE record

CVSS 7.0 High

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection.
- IBM Maximo Asset Management
Not analysed yet 12 Aug 2021
CVE-2021-20374 CVE record

CVSS 6.5 Medium

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 19 May 2021
CVE-2020-4493 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass…
- IBM Maximo Asset Management
Not analysed yet 5 Oct 2020
CVE-2020-4409 CVE record

CVSS 6.8 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct…
- IBM Maximo Asset Management
Not analysed yet 16 Sept 2020
CVE-2020-4526 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery…
- IBM Maximo Asset Management
Not analysed yet 15 Sept 2020
CVE-2020-4521 CVE record

CVSS 8.8 High

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker…
- IBM Maximo Asset Management
Not analysed yet 15 Sept 2020
CVE-2019-4671 CVE record

CVSS 6.3 Medium

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection.
- IBM Maximo Asset Management
Not analysed yet 15 Sept 2020
CVE-2019-4582 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse…
- IBM Maximo Asset Management
Not analysed yet 13 Aug 2020
CVE-2020-4463 CVE record

CVSS 8.2 HighCritical · CVSS 7+ and EPSS

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity…
- IBM Maximo Asset Management
Not analysed yet 29 Jul 2020
CVE-2019-4591 CVE record

CVSS 5.9 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0 and 7.6.1 does not invalidate session after logout…
- IBM Maximo Asset Management
Not analysed yet 13 Jul 2020
CVE-2020-4223 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 26 Jun 2020
CVE-2019-4650 CVE record

CVSS 6.3 Medium

IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection.
- IBM Maximo Asset Management
Not analysed yet 26 Jun 2020
CVE-2020-4529 CVE record

CVSS 7.3 High

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF).
- IBM Maximo Asset Management
Not analysed yet 8 Jun 2020
CVE-2019-4478 CVE record

CVSS 6.5 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain…
- IBM Maximo Asset Management
Not analysed yet 12 May 2020
CVE-2019-4749 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 17 Apr 2020
CVE-2019-4644 CVE record

CVSS 6.1 Medium

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 17 Apr 2020
CVE-2019-4446 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they…
- IBM Maximo Asset Management
Not analysed yet 17 Apr 2020
CVE-2019-4745 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive…
- IBM Maximo Asset Management
Not analysed yet 24 Feb 2020
CVE-2019-4583 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to…
- IBM Maximo Asset Management
Not analysed yet 20 Feb 2020
CVE-2019-4429 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 19 Feb 2020
CVE-2019-4530 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6, 7.6.1…
- IBM Maximo Asset Management
Not analysed yet 20 Nov 2019
CVE-2019-4486 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 24 Oct 2019
CVE-2019-4512 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive…
- IBM Maximo Asset Management
Not analysed yet 9 Oct 2019
CVE-2019-4430 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system.
- IBM Maximo Asset Management
Not analysed yet 17 Jul 2019
CVE-2019-4364 CVE record

CVSS 5.5 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 is vulnerable to CSV injection…
- IBM Maximo Asset Management
Not analysed yet 19 Jun 2019
CVE-2019-4303 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 19 Jun 2019
CVE-2019-4056 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type…
- IBM Maximo Asset Management
Not analysed yet 6 Jun 2019
CVE-2019-4048 CVE record

CVSS 2.1 Low

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain…
- IBM Maximo Asset Management
Not analysed yet 6 Jun 2019
CVE-2018-2028 CVE record

CVSS 6.5 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target…
- IBM Maximo Asset Management
Not analysed yet 6 Jun 2019
CVE-2018-1697 CVE record

CVSS 4.3 Medium

IBM Maximo Asset Management: IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames…
- IBM Maximo Asset Management
Not analysed yet 5 Dec 2018
CVE-2018-1584 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 28 Nov 2018
CVE-2018-1872 CVE record

CVSS 5.4 Medium

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting.
- IBM Maximo Asset Management
Not analysed yet 9 Nov 2018