# Ibm Maximo Asset Management


- [CVE-2020-4493](https://insights.sbomify.com/CVE-2020-4493/): Auth bypass in Maximo Asset Management (critical 9.8)
- [CVE-2013-3323](https://insights.sbomify.com/CVE-2013-3323/): Privilege escalation in n/a (critical 9.8)
- [CVE-2017-1175](https://insights.sbomify.com/CVE-2017-1175/): SQL injection in Maximo Asset Management (critical 9.8)
- [CVE-2020-4521](https://insights.sbomify.com/CVE-2020-4521/): Deserialization in Maximo Asset Management (high 8.8)
- [CVE-2018-1524](https://insights.sbomify.com/CVE-2018-1524/): Hardcoded credentials in Maximo Asset Management (high 8.8)
- [CVE-2018-1414](https://insights.sbomify.com/CVE-2018-1414/): SQL injection in Maximo Asset Management (high 8.8)
- [CVE-2017-1499](https://insights.sbomify.com/CVE-2017-1499/): File upload in Maximo Asset Management (high 8.8)
- [CVE-2016-9984](https://insights.sbomify.com/CVE-2016-9984/): Command injection in Maximo Asset Management (high 8.8)
- [CVE-2016-9977](https://insights.sbomify.com/CVE-2016-9977/): Auth bypass in Maximo Asset Management (high 8.8)
- [CVE-2015-0104](https://insights.sbomify.com/CVE-2015-0104/): Code injection in n/a (high 8.8)
- [CVE-2016-9976](https://insights.sbomify.com/CVE-2016-9976/): Path traversal in Maximo Asset Management (high 8.4)
- [CVE-2020-4463](https://insights.sbomify.com/CVE-2020-4463/): XML external entity in Maximo Asset Management (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/maximo-asset-management/