Lucene search

[email protected]CVE-2012-0747

HistorySep 10, 2012 - 5:55 p.m.

CVE-2012-0747

2012-09-1017:55:01

CWE-89

[email protected]

web.nvd.nist.gov

cve-2012-0747

sql injection

ibm maximo asset management

smartcloud control desk

tivoli asset management for it

tivoli service request manager

maximo service desk

change and configuration management database

ccmdb

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

NVD

Node

ibmchange_and_configuration_management_databaseMatch6.0

ibmchange_and_configuration_management_databaseMatch7.0

ibmmaximo_asset_managementMatch6.2.0.0

ibmmaximo_asset_managementMatch7.1.0.0

ibmmaximo_asset_managementMatch7.5.0.0

ibmmaximo_service_deskMatch6.2

ibmsmartcloud_control_deskMatch7.0

ibmtivoli_asset_management_for_itMatch6.0

ibmtivoli_asset_management_for_itMatch6.2

ibmtivoli_asset_management_for_itMatch7.0

ibmtivoli_asset_management_for_itMatch7.1

ibmtivoli_asset_management_for_itMatch7.2

ibmtivoli_service_request_managerMatch7.0

CPENameOperatorVersion
ibm:change_and_configuration_management_databaseibm change and configuration management databaseeq6.0
ibm:change_and_configuration_management_databaseibm change and configuration management databaseeq7.0
ibm:maximo_asset_managementibm maximo asset managementeq6.2.0.0
ibm:maximo_asset_managementibm maximo asset managementeq7.1.0.0
ibm:maximo_asset_managementibm maximo asset managementeq7.5.0.0
ibm:maximo_service_deskibm maximo service deskeq6.2
ibm:smartcloud_control_deskibm smartcloud control deskeq7.0
ibm:tivoli_asset_management_for_itibm tivoli asset management for iteq6.0
ibm:tivoli_asset_management_for_itibm tivoli asset management for iteq6.2
ibm:tivoli_asset_management_for_itibm tivoli asset management for iteq7.0

CPE	Name	Operator	Version
ibm:change_and_configuration_management_database	ibm change and configuration management database	eq	6.0
ibm:change_and_configuration_management_database	ibm change and configuration management database	eq	7.0
ibm:maximo_asset_management	ibm maximo asset management	eq	6.2.0.0
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.0.0
ibm:maximo_asset_management	ibm maximo asset management	eq	7.5.0.0
ibm:maximo_service_desk	ibm maximo service desk	eq	6.2
ibm:smartcloud_control_desk	ibm smartcloud control desk	eq	7.0
ibm:tivoli_asset_management_for_it	ibm tivoli asset management for it	eq	6.0
ibm:tivoli_asset_management_for_it	ibm tivoli asset management for it	eq	6.2
ibm:tivoli_asset_management_for_it	ibm tivoli asset management for it	eq	7.0

Rows per page:

1-10 of 131

References

osvdb.org/85186

secunia.com/advisories/50551

www-01.ibm.com/support/docview.wss?uid=swg1IV16032

www-01.ibm.com/support/docview.wss?uid=swg21610081

exchange.xforce.ibmcloud.com/vulnerabilities/74731

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

Related for CVE-2012-0747

nvd1 prion1 cvelist1 ibm1