CVE-2013-5464: IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX00...

Security readout for executives and security teams

This issue could let a logged-in user change inventory physical counts for storerooms they should not access. For organizations using IBM Maximo or SmartCloud Control Desk for operational inventory, the main concern is data integrity and unauthorized operational changes, not public unauthenticated compromise. Exposure is limited to environments running the affected IBM Maximo Asset Management or SmartCloud Control Desk versions with user access to inventory functions. Internet exposure is not required by the source description; an authenticated remote user is required. Treat this as a targeted operational integrity issue. Prioritize remediation if Maximo or SmartCloud Control Desk controls inventory, regulated assets, maintenance workflows, or financial reconciliation tied to storeroom counts. Mitigation focus: Upgrade to the IBM fixed IFIX or release levels named in the advisory.; Check IBM APAR IV46277 and related guidance for exact remediation instructions.; Restrict inventory and storeroom permissions until patch status is confirmed..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.