cbcvebase.
CVE-2018-1699
published 2018-08-24

CVE-2018-1699: IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow…

high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145968.

Affected

11 ranges
VendorProductVersion rangeFixed in
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management7.6 – 7.6.3