Server side request forgery (ssrf)

2024-01-1902:15:00

PRIOn knowledge base

www.prio-n.com

ibm maximo spatial asset management

ssrf vulnerability

unauthorized requests

network enumeration

facilitating attacks

ibm x-force id

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.1%

JSON

IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 255288.

CPENameOperatorVersion
maximo_application_suitege8.11
maximo_application_suitele8.11.2
maximo_application_suitege8.10
maximo_application_suitelt8.10.6
maximo_asset_managementeq7.6.1.3

Name	Operator	Version
maximo_application_suite	ge	8.11
maximo_application_suite	le	8.11.2
maximo_application_suite	ge	8.10
maximo_application_suite	lt	8.10.6
maximo_asset_management	eq	7.6.1.3