# Ibm Maximo Asset Management Essentials


- [CVE-2013-3323](https://insights.sbomify.com/CVE-2013-3323/): Privilege escalation in n/a (critical 9.8)
- [CVE-2018-1414](https://insights.sbomify.com/CVE-2018-1414/): SQL injection in Maximo Asset Management (high 8.8)
- [CVE-2017-1499](https://insights.sbomify.com/CVE-2017-1499/): File upload in Maximo Asset Management (high 8.8)
- [CVE-2016-9977](https://insights.sbomify.com/CVE-2016-9977/): Auth bypass in Maximo Asset Management (high 8.8)
- [CVE-2015-0104](https://insights.sbomify.com/CVE-2015-0104/): Code injection in n/a (high 8.8)
- [CVE-2016-9976](https://insights.sbomify.com/CVE-2016-9976/): Path traversal in Maximo Asset Management (high 8.4)
- [CVE-2011-1397](https://insights.sbomify.com/CVE-2011-1397/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-0107](https://insights.sbomify.com/CVE-2015-0107/): Path traversal in n/a (medium 6.5)
- [CVE-2015-4967](https://insights.sbomify.com/CVE-2015-4967/): SQL injection in n/a (medium 6.5)
- [CVE-2012-6355](https://insights.sbomify.com/CVE-2012-6355/): Privilege escalation in n/a (medium 6.5)
- [CVE-2012-6356](https://insights.sbomify.com/CVE-2012-6356/): Privilege escalation in n/a (medium 6.5)
- [CVE-2012-6357](https://insights.sbomify.com/CVE-2012-6357/): Privilege escalation in n/a (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/maximo-asset-management-essentials/