CVE-2019-4512: IBM Control Desk

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554.

Affected products

• IBM Control Desk: version 7.6.0 only; version 7.6.0.1 only
• IBM Maximo Asset Management: version 7.6.1.1 only
• IBM Maximo For Aviation: version 7.6 only; version 7.6.1 only; version 7.6.2 only; version 7.6.2.1 only; version 7.6.3 only
• IBM Maximo For Life Sciences: version 7.6 only
• IBM Maximo For Nuclear Power: version 7.6.0 only
• IBM Maximo For Oil And Gas: version 7.6.0 only
• IBM Maximo For Transportation: version 7.6.1 only; version 7.6.2 only; version 7.6.2.1 only; version 7.6.2.2 only; version 7.6.2.3 only; version 7.6.2.4 only
• IBM Maximo For Utilities: version 7.6 only
• IBM Smartcloud Control Desk: affected versions not specified
• IBM Tivoli Integration Composer: affected versions not specified

Published 2019-10-09. Last modified 2026-06-17.