IBM Maximo Application Suite command injection
CVE-2022-35281

5.5MEDIUM

Key Information:

Vendor

IBM
Status
Maximo Asset Management
Maximo Manage
Vendor
CVE Published:
9 January 2023

What is CVE-2022-35281?

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo Application Suite are vulnerable to CSV injection. IBM X-Force ID: 2306335.

Affected Version(s)

Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3

Maximo Manage 8.3, 8.4

References

https://www.ibm.com/support/pages/node/6852669
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/230635
vdb-entry

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.