Lucene search

[email protected]CVE-2015-0104

HistoryApr 24, 2017 - 6:59 a.m.

CVE-2015-0104

2017-04-2406:59:00

CWE-284

[email protected]

web.nvd.nist.gov

cve

ibm

tivoli

it asset management

service request manager

change and configuration management database

maximo

nvd

security vulnerability

remote code execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.4%

JSON

IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and Maximo Industry Solutions 7.1 through 7.1.1.8, 7.5 before 7.5.0.7 IFIX003, and 7.6 before 7.6.0.0 IFIX002 allow remote authenticated users to execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.5
ibm:maximo_for_utilitiesibm maximo for utilitieseq7.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.7
ibm:maximo_for_nuclear_poweribm maximo for nuclear powereq7.1
ibm:tivoli_service_request_manageribm tivoli service request managereq7.1
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.8
ibm:maximo_asset_managementibm maximo asset managementeq7.1.1.2
ibm:change_and_configuration_management_databaseibm change and configuration management databaseeq7.1
ibm:tivoli_asset_management_for_itibm tivoli asset management for iteq7.2
ibm:maximo_asset_managementibm maximo asset managementeq7.1

CPE	Name	Operator	Version
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.5
ibm:maximo_for_utilities	ibm maximo for utilities	eq	7.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.7
ibm:maximo_for_nuclear_power	ibm maximo for nuclear power	eq	7.1
ibm:tivoli_service_request_manager	ibm tivoli service request manager	eq	7.1
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.8
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1.1.2
ibm:change_and_configuration_management_database	ibm change and configuration management database	eq	7.1
ibm:tivoli_asset_management_for_it	ibm tivoli asset management for it	eq	7.2
ibm:maximo_asset_management	ibm maximo asset management	eq	7.1

Rows per page:

1-10 of 211

References

www-01.ibm.com/support/docview.wss?uid=swg21694974

www.securityfocus.com/bid/97999

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.4%

JSON

Related for CVE-2015-0104

prion3 zdt1 cvelist3 exploitdb1 cve2 ibm1