CVE-2013-5465

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
VendorProductVersion
ibmmaximo_asset_management
7.5.0.0
ibmmaximo_asset_management
7.5.0.1
ibmmaximo_asset_management
7.5.0.2
ibmmaximo_asset_management
7.5.0.3
ibmmaximo_asset_management
7.5.0.4
ibmchange_and_configuration_management_database
7.1.1.7
ibmchange_and_configuration_management_database
7.1.1.11
ibmchange_and_configuration_management_database
7.1.1.12
ibmmaximo_service_desk
7.1.1.7
ibmmaximo_service_desk
7.1.1.11
ibmmaximo_service_desk
7.1.1.12
ibmtivoli_asset_management_for_it
7.0
ibmtivoli_asset_management_for_it
7.1
ibmtivoli_it_asset_management_for_it
7.1.1.7
ibmtivoli_it_asset_management_for_it
7.1.1.11
ibmtivoli_it_asset_management_for_it
7.1.1.12
ibmtivoli_service_request_manager
7.1.1
ibmtivoli_service_request_manager
7.1.1.7
ibmtivoli_service_request_manager
7.1.1.11
ibmtivoli_service_request_manager
7.1.1.12
ibmsmartcloud_control_desk
7.0
ibmsmartcloud_control_desk
7.5
ibmsmartcloud_control_desk
7.5.0.0
ibmsmartcloud_control_desk
7.5.0.1
ibmsmartcloud_control_desk
7.5.0.2
ibmsmartcloud_control_desk
7.5.1.0
ibmsmartcloud_control_desk
7.5.1.1
ibmmaximo_asset_management
7.1
ibmmaximo_asset_management
7.1.1
ibmmaximo_asset_management
7.1.1.1
ibmmaximo_asset_management
7.1.1.2
ibmmaximo_asset_management
7.1.1.5
ibmmaximo_asset_management
7.1.1.6
ibmmaximo_asset_management
7.1.1.7
ibmmaximo_asset_management
7.1.1.11
ibmmaximo_asset_management
7.1.1.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration