IBM Tivoli It Asset Management For It vulnerabilities

8 CVEs affecting IBM Tivoli It Asset Management For It, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-3025, published 2014-07-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5465, published 2014-05-26. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011;…
CVE-2014-0914, published 2014-07-30. Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 6.x and 7.x through 7.5.0.6, Maximo Asset Management 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for…
CVE-2014-0915, published 2014-07-30. Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3…
CVE-2013-4016, published 2014-05-26. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3…
CVE-2013-6741, published 2014-05-26. Low severity, CVSS 3.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset…
CVE-2014-3025, published 2014-07-30. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management 6.2 through 6.2.8, 6.x and 7.1 through 7.1.1.2, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5 through 7.5.0.3…
CVE-2014-0825, published 2014-05-26. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before…
CVE-2014-0824, published 2014-05-26. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset Management for IT, Tivoli…