Ibm Maximo Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

7.633
7.526
7.6.124
7.6.022
7.5.0.021

Przeciwdziałanie

Official Fix94
Temporary Fix0
Workaround0
Unavailable1
Not Defined88

Wykorzystywanie

High19
Functional0
Proof-of-Concept1
Unproven16
Not Defined147

Wektor dostępu

Not Defined0
Physical6
Local11
Adjacent1
Network165

Uwierzytelnianie

Not Defined0
High1
Low126
None56

Interakcja z użytkownikiem

Not Defined0
Required66
None117

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤34
≤426
≤563
≤641
≤727
≤820
≤92
≤100

CVSSv3 Temp

≤10
≤21
≤33
≤432
≤560
≤650
≤720
≤815
≤92
≤100

VulDB

≤10
≤20
≤36
≤446
≤545
≤635
≤734
≤815
≤92
≤100

NVD

≤10
≤20
≤34
≤43
≤520
≤638
≤712
≤85
≤913
≤103

CNA

≤10
≤20
≤34
≤42
≤59
≤626
≤79
≤81
≤92
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k6
<2k0
<5k18
<10k67
<25k80
<50k12
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k95
<2k12
<5k39
<10k31
<25k6
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (72): 4.1, 5.2, 6.0, 6.1, 7.0, 7.1, 7.1.1, 7.1.1.1, 7.1.1.2, 7.1.1.3, 7.1.1.4, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.1.1.11, 7.1.1.12, 7.1.1.13, 7.1.2, 7.5, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.5.0.6, 7.5.0.7, 7.5.0.8, 7.5.0.8 IF5, 7.5.0.9, 7.5.0.9 IFIX003, 7.5.0.9 IFIX006, 7.5.0.10 IFIX003, 7.5.1, 7.5.1.1, 7.5.1.2, 7.6, 7.6.0.1, 7.6.0.2, 7.6.0.3, 7.6.0.4, 7.6.0.5, 7.6.0.5 FP004, 7.6.0.5 IF002, 7.6.1, 7.6.1.1, 7.6.1.2, 7.6.1.3, 7.6.2, 7.6.2.1, 7.6.3, 7.6.3.1, 7.6.4, 7.11, 7.11.1, 7.11.2, 7.11.3, 7.11.4, 7.11.5, 7.11.6, 7.11.7, 7.11.8, 7.11.9, 7.11.11, 7.11.12, 7.11.13, 8.7, 8.8, 8.9, 8.10, 8.11

Link to Product Website: https://www.ibm.com/

Typ oprogramowania: Asset Management Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-04-066.46.3IBM Maximo Application Suite URL information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-22328
2024-03-147.77.6IBM Maximo Asset Management XML Data XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-27266
2024-03-133.83.7IBM Maximo Application Suite Maximo Mobile for EAM information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43043
2024-03-134.94.9IBM Maximo Asset Management Web UI cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38723
2024-03-134.54.4IBM Maximo Application Suite/Maximo Asset Management URL Parameter information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-32335
2024-02-027.97.8IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-32333
2024-01-195.45.4IBM Maximo Spatial Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-32337
2024-01-195.85.7IBM Maximo Asset Management cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-47718
2023-09-084.44.4IBM Maximo Application Suite/Maximo Asset Management cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-32332
2023-06-054.24.2IBM Maximo Asset Management/Maximo Application Suite URL Parameter information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-32334
2023-05-064.44.4IBM Maximo Asset Management Web UI cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43866
2023-04-285.04.9IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-27864
2023-04-285.35.2IBM Maximo Asset Management information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-27860
2023-03-156.16.0IBM Maximo Application Suite Manage Application privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-46774
2023-03-035.15.1IBM Maximo Asset Management/Maximo Application Suite Web UI cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35645
2023-02-245.05.0IBM Maximo Application Suite information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43923
2023-02-176.06.0IBM Maximo Asset Management information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-41734
2023-01-096.66.5IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-35281
2022-11-284.74.7IBM Maximo Mobile privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-41732
2022-09-226.96.8IBM Maximo Asset Management weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-40616
2022-09-146.06.0IBM Maximo Asset Management information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-38924
2022-08-274.84.7IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35714
2022-05-035.95.7IBM Maximo Asset Management HTTP Header privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29854
2022-04-214.44.4IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22435
2022-04-214.44.4IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22436

158 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Ibm

Do you know our Splunk app?

Download it now for free!