Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
65 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 1.2% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow… | |
| Modificada | Media (4.3) | 1.1% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and… | |
| Modificada | Baja (3.5) | 0.94% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and… | |
| Modificada | Media (6.5) | 1.2% | — | IBM Smartcloud Control Desk | 20/2/2013 | 16/6/2026 | IBM SmartCloud Control Desk 7.5 allows remote authenticated users to bypass intended access restrictions via vectors involving an expired password. | |
| Modificada | Baja (3.5) | 0.94% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and… | |
| Modificada | Media (4.3) | 1.2% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML… | |
| Modificada | Media (4.3) | 1.2% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web… | |
| Modificada | Media (4) | 1.1% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors. | |
| Modificada | Media (6.8) | 1.3% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via… | |
| Modificada | Media (6.8) | 2.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via… | |
| Modificada | Media (6.5) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL… | |
| Modificada | Baja (3.5) | 0.95% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to inject arbitrary web… | |
| Modificada | Media (6.5) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL… | |
| Modificada | Media (6.5) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via… | |
| Modificada | Media (6.8) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack the… |