Ibm Maximo Asset Management Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

7.632
7.525
7.6.122
7.6.021
7.5.0.020

Przeciwdziałanie

Official Fix77
Temporary Fix0
Workaround0
Unavailable0
Not Defined74

Wykorzystywanie

High14
Functional0
Proof-of-Concept1
Unproven15
Not Defined121

Wektor dostępu

Not Defined0
Physical1
Local6
Adjacent1
Network143

Uwierzytelnianie

Not Defined0
High1
Low104
None46

Interakcja z użytkownikiem

Not Defined0
Required53
None98

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤31
≤414
≤556
≤636
≤724
≤818
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤420
≤553
≤643
≤719
≤813
≤92
≤100

VulDB

≤10
≤20
≤31
≤434
≤539
≤631
≤730
≤814
≤92
≤100

NVD

≤10
≤20
≤32
≤41
≤517
≤633
≤79
≤85
≤912
≤103

CNA

≤10
≤20
≤31
≤42
≤59
≤622
≤76
≤80
≤92
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k0
<5k11
<10k58
<25k70
<50k11
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k75
<2k10
<5k33
<10k29
<25k4
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (62): 6.0, 6.1, 7.0, 7.1, 7.1.1, 7.1.1.1, 7.1.1.2, 7.1.1.3, 7.1.1.4, 7.1.1.5, 7.1.1.6, 7.1.1.7, 7.1.1.8, 7.1.1.9, 7.1.1.11, 7.1.1.12, 7.1.1.13, 7.1.2, 7.5, 7.5.0.1, 7.5.0.2, 7.5.0.3, 7.5.0.4, 7.5.0.5, 7.5.0.6, 7.5.0.7, 7.5.0.8, 7.5.0.8 IF5, 7.5.0.9, 7.5.0.9 IFIX003, 7.5.0.9 IFIX006, 7.5.0.10 IFIX003, 7.5.1, 7.6, 7.6.0.1, 7.6.0.2, 7.6.0.3, 7.6.0.4, 7.6.0.5, 7.6.0.5 FP004, 7.6.0.5 IF002, 7.6.1, 7.6.1.1, 7.6.1.2, 7.6.1.3, 7.6.2, 7.6.3, 7.11, 7.11.1, 7.11.2, 7.11.3, 7.11.4, 7.11.5, 7.11.6, 7.11.7, 7.11.8, 7.11.9, 7.11.11, 7.11.12, 7.11.13, 8.10, 8.11

Link to Product Website: https://www.ibm.com/

Typ oprogramowania: Asset Management Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-03-147.77.6IBM Maximo Asset Management XML Data XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-27266
2024-03-134.94.9IBM Maximo Asset Management Web UI cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38723
2024-03-134.54.4IBM Maximo Application Suite/Maximo Asset Management URL Parameter information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-32335
2024-02-027.97.8IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-32333
2024-01-195.85.7IBM Maximo Asset Management cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-47718
2023-09-084.44.4IBM Maximo Application Suite/Maximo Asset Management cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-32332
2023-06-054.24.2IBM Maximo Asset Management/Maximo Application Suite URL Parameter information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-32334
2023-05-064.44.4IBM Maximo Asset Management Web UI cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-43866
2023-04-285.04.9IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-27864
2023-04-285.35.2IBM Maximo Asset Management information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-27860
2023-03-035.15.1IBM Maximo Asset Management/Maximo Application Suite Web UI cross site scripting$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35645
2023-02-176.06.0IBM Maximo Asset Management information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-41734
2023-01-096.66.5IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-35281
2022-09-226.96.8IBM Maximo Asset Management weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-40616
2022-09-146.06.0IBM Maximo Asset Management information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-38924
2022-08-274.84.7IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-35714
2022-05-035.95.7IBM Maximo Asset Management HTTP Header privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-29854
2022-04-214.44.4IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22435
2022-04-214.44.4IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-22436
2022-02-184.54.4IBM Maximo Asset Management weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-38935
2021-08-313.53.4IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29743
2021-08-273.53.4IBM Maximo Asset Management Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-29744
2021-08-127.57.2IBM Maximo Asset Management privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-20509
2021-05-204.34.3IBM Maximo Asset Management Web UI cross site scripting$5k-$25k$5k-$25kNot DefinedNot Defined0.00CVE-2021-20374
2020-10-016.66.6IBM Maximo Asset Management HTTP Command weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-4493

126 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Ibm

Might our Artificial Intelligence support you?

Check our Alexa App!