CVE-2019-4446

IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifying request parameters. IBM X-Force ID: 163490.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
ibmCNA
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/UI:N/AV:N/PR:L/A:N/I:L/S:U/C:L/AC:L/RC:C/E:U/RL:O
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
VendorProductVersion
ibmcontrol_desk
7.6.1
ibmcontrol_desk
7.6.1.1
ibmmaximo_asset_configuration_manager
7.6.6
ibmmaximo_asset_configuration_manager
7.6.7
ibmmaximo_asset_configuration_manager
7.6.7.1
ibmmaximo_asset_health_insights
7.6.1
ibmmaximo_asset_health_insights
7.6.1.1
ibmmaximo_asset_management
7.6.0
ibmmaximo_asset_management
7.6.1
ibmmaximo_asset_management
7.6.1.1
ibmmaximo_asset_management_scheduler
7.6.7
ibmmaximo_asset_management_scheduler
7.6.7.1
ibmmaximo_asset_management_scheduler
7.6.7.3
ibmmaximo_asset_management_scheduler_plus
7.6.7
ibmmaximo_asset_management_scheduler_plus
7.6.7.1
ibmmaximo_asset_management_scheduler_plus
7.6.7.3
ibmmaximo_calibration
7.6
ibmmaximo_enterprise_adapter
7.6
ibmmaximo_enterprise_adapter
7.6.1
ibmmaximo_equipment_maintenance_assistant_on-premises
-
ibmmaximo_for_aviation
7.6.6
ibmmaximo_for_aviation
7.6.7
ibmmaximo_for_aviation
7.6.8
ibmmaximo_for_life_sciences
7.6
ibmmaximo_for_nuclear_power
7.6.1
ibmmaximo_for_oil_and_gas
7.6.1
ibmmaximo_for_service_providers
7.6.3.1
ibmmaximo_for_service_providers
7.6.3.2
ibmmaximo_for_service_providers
7.6.3.3
ibmmaximo_for_transportation
7.6.2.3
ibmmaximo_for_transportation
7.6.2.4
ibmmaximo_for_transportation
7.6.2.5
ibmmaximo_for_utilities
7.6.0.1
ibmmaximo_for_utilities
7.6.0.2
ibmmaximo_linear_asset_manager
7.6.0.1
ibmmaximo_linear_asset_manager
7.6.0.2
ibmmaximo_linear_asset_manager
7.6.0.3
ibmmaximo_network_on_blockchain
7.6.0.0
ibmmaximo_network_on_blockchain
7.6.0.1
ibmtivoli_integration_composer
7.6
𝑥
= Vulnerable software versions