CVE-2022-35281: IBM Maximo Application Suite command injection
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo Application Suite are vulnerable to CSV injection. IBM X-Force ID: 2306335.
Other sources
IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite are vulnerable to CSV injection.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-35281?
The severity of CVE-2022-35281 is high.
Which software versions are affected by CVE-2022-35281?
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Manage 8.3, 8.4 application in IBM Maximo Application Suite are affected by CVE-2022-35281.
What is CSV injection?
CSV injection is a vulnerability that allows an attacker to inject malicious content into a CSV (Comma Separated Values) file, which can be exploited to execute arbitrary code or perform unauthorized actions.
Are there any fixes or patches available for CVE-2022-35281?
IBM has released a security advisory for CVE-2022-35281 which includes instructions to apply the necessary fixes or patches.
Where can I find more information about CVE-2022-35281?
More information about CVE-2022-35281 can be found on the IBM X-Force Exchange website and the official IBM support page.