CVE-2023-47718

IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 271843.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*

History

24 Jan 2024, 21:23

Type Values Removed Values Added
References () https://www.ibm.com/support/pages/node/7107738 - () https://www.ibm.com/support/pages/node/7107738 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/271843 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/271843 - VDB Entry, Vendor Advisory
References () https://www.ibm.com/support/pages/node/7107740 - () https://www.ibm.com/support/pages/node/7107740 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:ibm:maximo_asset_management:7.6.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:maximo_application_suite:*:*:*:*:*:*:*:*

19 Jan 2024, 15:56

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-19 02:15

Updated : 2024-02-05 00:22


NVD link : CVE-2023-47718

Mitre link : CVE-2023-47718

CVE.ORG link : CVE-2023-47718


JSON object : View

Products Affected

ibm

  • maximo_asset_management
  • maximo_application_suite
CWE
CWE-352

Cross-Site Request Forgery (CSRF)