CVE-2024-45077

6.5 mediumEPSS 0.4%

Medium (6.5) in ibm maximo asset management. EPSS 0.4% chance of exploitation in the next 30 days.

IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows authenticated low privileged user to upload restricted file types with a simple method of adding a dot to the end of the file name if Maximo is installed on Windows operating system.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWE: CWE-98
Published: 2025-01-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:maximo_asset_management

References

https://www.ibm.com/support/pages/node/7174819

Check your stack JSON