Show filters
182 Total Results
Displaying 51-60 of 182
Sort by:
Attacker Value
Unknown
CVE-2019-4430
Disclosure Date: July 17, 2019 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162887.
0
Attacker Value
Unknown
CVE-2019-4364
Disclosure Date: June 19, 2019 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 161680.
0
Attacker Value
Unknown
CVE-2019-4303
Disclosure Date: June 19, 2019 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 160949.
0
Attacker Value
Unknown
CVE-2019-4048
Disclosure Date: June 06, 2019 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. IBM X-Force ID: 156311.
0
Attacker Value
Unknown
CVE-2018-2028
Disclosure Date: June 06, 2019 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 could allow a an authenticated user to replace a target page with a phishing site which could allow the attacker to obtain highly sensitive information. IBM X-Force ID: 155554.
0
Attacker Value
Unknown
CVE-2019-4056
Disclosure Date: June 06, 2019 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious files. IBM X-Force ID: 156565.
0
Attacker Value
Unknown
CVE-2018-1697
Disclosure Date: December 05, 2018 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 could allow an authenticated user to enumerate usernames using a specially crafted HTTP request. IBM X-Force ID: 145966.
0
Attacker Value
Unknown
CVE-2018-1584
Disclosure Date: November 28, 2018 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143497.
0
Attacker Value
Unknown
CVE-2018-1872
Disclosure Date: November 09, 2018 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 151330.
0
Attacker Value
Unknown
CVE-2018-1686
Disclosure Date: October 05, 2018 (last updated November 27, 2024)
IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145505.
0
