CVE-2021-20509: IBM Maximo Asset Management

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 198243.

Affected products

• IBM Maximo Asset Management: after 7.6.0.0, before 7.6.1.2 (fixed in 7.6.1.2)

Published 2021-08-12. Last modified 2026-06-17.