Page 16 of 185 results (0.005 seconds)

CVSS: 7.1EPSS: 0%CPEs: 17EXPL: 0

CVE-2013-3049

https://notcve.org/view.php?id=CVE-2013-3049

01 Oct 2013 — IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971. IBM Maximo Asset Management 7.1 hasta la versión 7.1.1.12 y 7.5 anterior a 7.5.0.5 permite a usuarios remotos autenticados evitar restricciones de acceso intencionadas a través de vectores sin especificar, una vulnerabilidad diferente a CVE-2013-3971. • http://secunia.com/advisories/55068 •

CVSS: 4.3EPSS: 0%CPEs: 16EXPL: 0

CVE-2013-3972

https://notcve.org/view.php?id=CVE-2013-3972

01 Oct 2013 — IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. IBM Maximo Asset Management 7.1 anterior a la versión 7.1.1.12 y 7.5 anterior a la versión 7.5.0.5 permite a usuarios remotos autenticados obtener información sensible a través de vectores sin especificar. • http://secunia.com/advisories/55068 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.8EPSS: 1%CPEs: 23EXPL: 0

CVE-2012-3323

https://notcve.org/view.php?id=CVE-2012-3323

01 Oct 2013 — IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors. IBM Maximo Asset Management 6.2 anterior a la versión 6.2.8, 7.1 anterior a 7.1.1.12, y 7.5 anterior a la versión 7.5.0.3 permite a atacantes remotos obtener privilegios a través de vectores sin especificar. • http://osvdb.org/97924 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 5.4EPSS: 0%CPEs: 21EXPL: 0

CVE-2013-4019

https://notcve.org/view.php?id=CVE-2013-4019

01 Oct 2013 — Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en IBM Maximo Asset Management 6.2 hasta la versión 6.2.8 y 7.1 anterior a 7.1.1.12 permite a usuarios remotos autenticados inyectar script web arbitrario o HTML a través de vectores sin especificar. • http://secunia.com/advisories/55068 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 25EXPL: 0

CVE-2013-5381

https://notcve.org/view.php?id=CVE-2013-5381

01 Oct 2013 — IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to gain privileges via unspecified vectors. IBM Maximo Asset Management 6.2 hasta la versión 6.2.8, y 7.1 hasta 7.1.1.12, y 7.5 anterior a la versión 7.5.0.3 permite a usuarios remotos autenticados obtener privilegios a través de vectores sin especificar. • http://secunia.com/advisories/55068 •

CVSS: 5.3EPSS: 0%CPEs: 23EXPL: 0

CVE-2013-4013

https://notcve.org/view.php?id=CVE-2013-4013

01 Oct 2013 — IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors. IBM Maximo Asset Management 6.2 hasta la versión 6.2.8, 7.1 hasta 7.1.1.12, y 7.5 anterior a la versión 7.5.0.2 permite a atacantes remotos obtener información sensible a través de vectores sin especificar. • http://secunia.com/advisories/55068 •

CVSS: 8.2EPSS: 0%CPEs: 26EXPL: 0

CVE-2013-5395

https://notcve.org/view.php?id=CVE-2013-5395

01 Oct 2013 — IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors. IBM Maximo Asset Management 6.2 hasta la versión 6.2.8, 7.1 anterior a la versión 7.1.1.12, y 7.5 anterior a 7.5.0.5 permite a atacantes remotos evadir restricciones de acceso intencionadas a través de vectores sin especificar. • http://secunia.com/advisories/55068 •

CVSS: 8.8EPSS: 0%CPEs: 26EXPL: 0

CVE-2013-5382

https://notcve.org/view.php?id=CVE-2013-5382

01 Oct 2013 — IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5383. IBM Maximo Asset Management 6.2 hasta la versión 6.2.8, 7.1 anterior a 7.1.1.12, y 7.5 anterior a la versión 7.5.0.5 permite a usuarios remotos autenticados obtener privilegios a través de vectores sin especificar, una vulnerabilidad diferente a CVE-2013-5383. • http://secunia.com/advisories/55068 •

CVSS: 6.1EPSS: 0%CPEs: 35EXPL: 0

CVE-2012-3327

https://notcve.org/view.php?id=CVE-2012-3327

20 Feb 2013 — Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to a login action. Vulnerabilidad de ejecución de secuencias de comandos ... • http://www-01.ibm.com/support/docview.wss?uid=swg1IV22698 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0

CVE-2013-0457

https://notcve.org/view.php?id=CVE-2013-0457

20 Feb 2013 — Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid. Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en IBM Maximo Asset Management v7.5, Maximo Asset Management Essentials v7.5, y SmartCloud Control Desk v7.5 que permite a usuarios remotos autenticados inyectar secuencias de comandos we... • http://www-01.ibm.com/support/docview.wss?uid=swg1IV20590 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •