CVE-2012-0747

EUVD-2012-0779
SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
ibmchange_and_configuration_management_database
6.0
ibmchange_and_configuration_management_database
7.0
ibmmaximo_asset_management
6.2.0.0
ibmmaximo_asset_management
7.1.0.0
ibmmaximo_asset_management
7.5.0.0
ibmmaximo_service_desk
6.2
ibmsmartcloud_control_desk
7.0
ibmtivoli_asset_management_for_it
6.0
ibmtivoli_asset_management_for_it
6.2
ibmtivoli_asset_management_for_it
7.0
ibmtivoli_asset_management_for_it
7.1
ibmtivoli_asset_management_for_it
7.2
ibmtivoli_service_request_manager
7.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/85186
http://secunia.com/advisories/50551
http://www-01.ibm.com/support/docview.wss?uid=swg1IV16032
http://www-01.ibm.com/support/docview.wss?uid=swg21610081
https://exchange.xforce.ibmcloud.com/vulnerabilities/74731
http://osvdb.org/85186
http://secunia.com/advisories/50551
http://www-01.ibm.com/support/docview.wss?uid=swg1IV16032
http://www-01.ibm.com/support/docview.wss?uid=swg21610081
https://exchange.xforce.ibmcloud.com/vulnerabilities/74731