CVE-2017-1499: IBM Maximo Asset Management

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 129106.

Affected products

• IBM Maximo Asset Management: version 7.5.0.0 only; version 7.6.0.0 only
• IBM Maximo Asset Management Essentials: version 7.5.0.0 only

Published 2018-02-14. Last modified 2026-06-17.