Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
182 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4) | 1.1% | — | IBM Maximo Asset Management | 1/10/2013 | 16/6/2026 | IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971. | |
| Modificada | Baja (3.5) | 0.95% | — | IBM Maximo Asset Management | 1/10/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | |
| Modificada | Media (6.5) | 1.2% | — | IBM Maximo Asset Management | 1/10/2013 | 16/6/2026 | IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors. | |
| Modificada | Media (6.5) | 1.0% | — | IBM Maximo Asset Management | 1/10/2013 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | |
| Modificada | Media (6.8) | 1.4% | — | IBM Maximo Asset Management | 1/10/2013 | 16/6/2026 | IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors. | |
| Modificada | Baja (3.5) | 0.94% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Smartcloud Control Desk | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a uisessionid. | |
| Modificada | Media (6.5) | 1.2% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Smartcloud Control Desk | 20/2/2013 | 16/6/2026 | IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges and bypass intended restrictions on asset-lookup operations via unspecified vectors. | |
| Modificada | Media (6.5) | 1.2% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Smartcloud Control Desk | 20/2/2013 | 16/6/2026 | IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation. | |
| Modificada | Media (6.5) | 1.2% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow… | |
| Modificada | Media (4.3) | 1.1% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR IT+1 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary… | |
| Modificada | Media (4.3) | 1.1% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and… | |
| Modificada | Baja (3.5) | 0.94% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and… | |
| Modificada | Baja (3.5) | 0.94% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Tivoli Service Request Manager+3 | 20/2/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and… | |
| Modificada | Media (4.3) | 1.2% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML… | |
| Modificada | Media (4.3) | 1.2% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web… | |
| Modificada | Media (4) | 1.1% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to obtain sensitive information via unspecified vectors. | |
| Modificada | Media (6.8) | 1.3% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via… | |
| Modificada | Media (6.8) | 2.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via… | |
| Modificada | Media (6.5) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL… | |
| Modificada | Baja (3.5) | 0.95% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to inject arbitrary web… | |
| Modificada | Media (6.5) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL… | |
| Modificada | Media (6.5) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via… | |
| Modificada | Media (6.8) | 1.0% | — | IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service DeskIBM Smartcloud Control Desk+2 | 10/9/2012 | 16/6/2026 | Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack the… | |
| Modificada | Media (4.3) | 1.9% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management EssentialsIBM Tivoli Asset Management FOR ITIBM Trivoli Service Request Manager+2 | 13/3/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM… | |
| Modificada | Media (4.3) | 1.1% | — | IBM Maximo Asset ManagementIBM Maximo Asset Management Essentials | 13/3/2012 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow remote attackers to inject arbitrary web script or HTML via the uisesionid parameter to (1) maximo.jsp or (2) the default URI under ui/. |