[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa-8GsMAed-7PDE_z2eR6gGz9V8DQSc9rldeBMSt8nVE":3,"g5a-ex:ibm\u002Fmaximo_service_desk@*":115,"g5a-family:ibm\u002Fmaximo_service_desk":117},{"success":4,"data":5},true,{"product":6,"versions":33,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":92,"seoMetadata":93,"meta":112},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":32},"ibm","maximo_service_desk",6,28,0,"2020-02-18",[14,18,20,23,26,29],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"6.2",20,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"6.2.8",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"7.1.1.11",3,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"7.1.1.12",4,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"7.1.1.7",5,{"version":30,"cve_count":31,"kev_count":11,"has_kev":17},"7.1.1.8",1,"Maximo Service Desk by Ibm is a technology product with 6 tracked versions and 28 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[34,35,36,37,38,39],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":31,"kev_count":11,"has_kev":17},[41,48,55,61,66,71,75,80,84,88],{"cveId":42,"description":43,"publishedDate":12,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":47},"CVE-2013-3323","A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the authentication session, which could let a malicious user obtain unauthorized access.",9.8,"v3.1","Critical",0.02868,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":28,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":54},"CVE-2011-1394","IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session.","2012-03-13","v2","Medium",0.02584,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":60},"CVE-2012-2183","Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.","2012-09-10",6.8,0.02021,{"cveId":62,"description":63,"publishedDate":51,"cvssScore":64,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":65},"CVE-2012-0195","Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via the display name.",4.3,0.01951,{"cveId":67,"description":68,"publishedDate":51,"cvssScore":69,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":70},"CVE-2011-4816","SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.",6.5,0.01696,{"cveId":72,"description":73,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":74},"CVE-2012-2184","Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to hijack web sessions via unspecified vectors.",0.01309,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":69,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":79},"CVE-2013-5465","IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.","2014-05-26",0.01231,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":69,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":79},"CVE-2012-6355","IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.","2013-02-20",{"cveId":85,"description":86,"publishedDate":51,"cvssScore":25,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":87},"CVE-2011-4817","The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 shows the username, which might allow remote authenticated users to have an unspecified impact via a targeted attack against the corresponding user account.",0.01209,{"cveId":89,"description":90,"publishedDate":58,"cvssScore":64,"cvssVersion":52,"severity":53,"isKev":17,"epssScore":91},"CVE-2012-3313","Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.",0.01161,[],{"title":94,"metaDescription":95,"keywords":96,"structuredData":97},"Maximo Service Desk by Ibm - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Maximo Service Desk by Ibm covering 6 versions with 28 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Maximo Service Desk vulnerabilities, Maximo Service Desk security, Maximo Service Desk CVE, Ibm Maximo Service Desk, Maximo Service Desk threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":98,"@type":99,"name":100,"description":95,"url":101,"manufacturer":102,"applicationCategory":106,"softwareVersion":107,"mainEntity":108},"https:\u002F\u002Fschema.org","SoftwareApplication","Maximo Service Desk","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Fmaximo_service_desk",{"@type":103,"name":104,"url":105},"Organization","Ibm","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fibm","Security Software","6 versions tracked",{"@type":109,"name":110,"description":111,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Maximo Service Desk Security Vulnerabilities","Security vulnerabilities affecting Maximo Service Desk by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":113,"apiVersion":114},"2026-10-28T15:22:26.811Z","3.0",{"rows":116,"total":11,"capped":17,"failed":11},[],[]]