| Package | Affected versions | Patched versions |
|---|---|---|
| maximo asset management | ≥ 7.6.0, < 7.6.0.10≥ 7.6.1, < 7.6.1.2 | 7.6.0.107.6.1.2 |
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in Java. By sending specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 182396.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free