Ibm

Maximo Anywhere

11 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2019-4291

  • EPSS 0.06%
  • Published 16.02.2022 17:15:09
  • Last modified 21.11.2024 04:43:25

IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697.

4.6

CVE-2019-4351

  • EPSS 0.05%
  • Published 16.02.2022 17:15:09
  • Last modified 21.11.2024 04:43:30

IBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with physical access to the device. IBM X-Force ID: 161493.

2.4

CVE-2019-4352

  • EPSS 0.05%
  • Published 16.02.2022 17:15:09
  • Last modified 21.11.2024 04:43:30

IBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code. IBM X-Force ID: 161494.

3.6

CVE-2019-4349

  • EPSS 0.05%
  • Published 03.11.2020 14:15:12
  • Last modified 21.11.2024 04:43:30

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 applications can be installed on a deprecated operating system version that could compromised the confidentiality and integrity of the service. IBM X-Force ID: 161486

2.4

CVE-2019-4266

  • EPSS 0.05%
  • Published 06.05.2020 14:15:10
  • Last modified 21.11.2024 04:43:24

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160199.

4.3

CVE-2019-4288

  • EPSS 0.05%
  • Published 29.04.2020 14:15:16
  • Last modified 21.11.2024 04:43:25

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631.

4.3

CVE-2019-4286

  • EPSS 0.05%
  • Published 29.04.2020 14:15:15
  • Last modified 21.11.2024 04:43:25

IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514.

5.4

CVE-2019-4429

  • EPSS 0.24%
  • Published 19.02.2020 16:15:11
  • Last modified 21.11.2024 04:43:35

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

2.4

CVE-2019-4265

  • EPSS 0.05%
  • Published 10.10.2019 14:15:18
  • Last modified 21.11.2024 04:43:24

IBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive information about the device. IBM X-Force ID: 160198.

5.4

CVE-2017-1604

  • EPSS 0.27%
  • Published 21.02.2018 21:29:00
  • Last modified 21.11.2024 03:22:08

IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr...