7.6.2

DATE	CVE	VULNERABILITY TITLE	RISK
2021-02-18	CVE-2021-20446	Cross-site Scripting vulnerability in IBM Maximo for Civil Infrastructure 7.6.2 IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. network ibm CWE-79	3.5
2021-02-18	CVE-2021-20445	Insufficiently Protected Credentials vulnerability in IBM Maximo for Civil Infrastructure 7.6.2 IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. network low complexity ibm CWE-522	4.0
2021-02-18	CVE-2021-20444	Cross-site Scripting vulnerability in IBM Maximo for Civil Infrastructure 7.6.2 IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. network ibm CWE-79	4.3
2021-02-18	CVE-2021-20443	Inclusion of Functionality from Untrusted Control Sphere vulnerability in IBM Maximo for Civil Infrastructure 7.6.2 IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. network low complexity ibm CWE-829	6.5