IBM Maximo For Utilities vulnerabilities, page 3

45 vulnerabilities

Known vulnerabilities in IBM Maximo For Utilities, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2019-4644ibmcontrol_desk+19
EPSS score
0.89%
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170880.5.4CVE-2019-4749ibmcontrol_desk+19
EPSS score
0.67%
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173308.4.3CVE-2019-4745ibmmaximo_asset_management+6
EPSS score
0.87%
IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883.8.5CVE-2019-4364ibmcontrol_desk+9
EPSS score
2.57%
IBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commands on the system. IBM X-Force ID: 161680.2.1CVE-2019-4048ibmcontrol_desk+9
EPSS score
0.31%
IBM Maximo Asset Management 7.6 could allow a physical user of the system to obtain sensitive information from a previous user of the same machine. IBM X-Force ID: 156311.