CVE-2017-1352: IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orde...

Security readout for executives and security teams

IBM Maximo Asset Management 7.5 and 7.6 had a flaw where an authenticated user could place commands in work orders that might run when another user downloads the affected file. The sources do not provide severity, CVSS, named fixes, or evidence of active exploitation. Exposure is most likely in organizations still running IBM Maximo Asset Management 7.5 or 7.6, especially where authenticated users can create or modify work orders and other users download related files. Treat this as a legacy-platform exposure requiring verification, not an emergency exploitation claim. Prioritize asset discovery and vendor advisory review, especially if Maximo supports critical operations or broad authenticated user access. Mitigation focus: Check IBM advisory swg22006650 for official fixes or interim guidance.; Inventory Maximo Asset Management deployments and confirm versions 7.5 or 7.6.; Restrict work order creation and file download privileges to trusted roles..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.