6.5

CVE-2013-5465

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.

Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Maximo Asset Management Version7.5.0.0
Ibm ≫ Maximo Asset Management Version7.5.0.1
Ibm ≫ Maximo Asset Management Version7.5.0.2
Ibm ≫ Maximo Asset Management Version7.5.0.3
Ibm ≫ Maximo Asset Management Version7.5.0.4
Ibm ≫ Maximo Service Desk Version7.1.1.7
   Ibm ≫ Maximo Service Desk Version7.1.1.7
   Ibm ≫ Maximo Service Desk Version7.1.1.7
Ibm ≫ Maximo Service Desk Version7.1.1.11
   Ibm ≫ Maximo Service Desk Version7.1.1.11
   Ibm ≫ Maximo Service Desk Version7.1.1.11
Ibm ≫ Maximo Service Desk Version7.1.1.12
   Ibm ≫ Maximo Service Desk Version7.1.1.12
   Ibm ≫ Maximo Service Desk Version7.1.1.12
Ibm ≫ Tivoli It Asset Management For It Version7.1.1.7
   Ibm ≫ Tivoli It Asset Management For It Version7.1.1.7
   Ibm ≫ Tivoli It Asset Management For It Version7.1.1.7
Ibm ≫ Tivoli It Asset Management For It Version7.1.1.11
   Ibm ≫ Tivoli It Asset Management For It Version7.1.1.11
   Ibm ≫ Tivoli It Asset Management For It Version7.1.1.11
Ibm ≫ Tivoli It Asset Management For It Version7.1.1.12
   Ibm ≫ Tivoli It Asset Management For It Version7.1.1.12
   Ibm ≫ Tivoli It Asset Management For It Version7.1.1.12
Ibm ≫ Tivoli Service Request Manager Version7.1.1
   Ibm ≫ Tivoli Service Request Manager Version7.1.1
   Ibm ≫ Tivoli Service Request Manager Version7.1.1
Ibm ≫ Tivoli Service Request Manager Version7.1.1.7
   Ibm ≫ Tivoli Service Request Manager Version7.1.1.7
   Ibm ≫ Tivoli Service Request Manager Version7.1.1.7
Ibm ≫ Tivoli Service Request Manager Version7.1.1.11
   Ibm ≫ Tivoli Service Request Manager Version7.1.1.11
   Ibm ≫ Tivoli Service Request Manager Version7.1.1.11
Ibm ≫ Tivoli Service Request Manager Version7.1.1.12
   Ibm ≫ Tivoli Service Request Manager Version7.1.1.12
   Ibm ≫ Tivoli Service Request Manager Version7.1.1.12
Ibm ≫ Smartcloud Control Desk Version7.0
Ibm ≫ Smartcloud Control Desk Version7.5
Ibm ≫ Smartcloud Control Desk Version7.5.0.0
Ibm ≫ Smartcloud Control Desk Version7.5.0.1
Ibm ≫ Smartcloud Control Desk Version7.5.0.2
Ibm ≫ Smartcloud Control Desk Version7.5.1.0
Ibm ≫ Smartcloud Control Desk Version7.5.1.1
Ibm ≫ Maximo Asset Management Version7.1
Ibm ≫ Maximo Asset Management Version7.1.1
Ibm ≫ Maximo Asset Management Version7.1.1.1
Ibm ≫ Maximo Asset Management Version7.1.1.2
Ibm ≫ Maximo Asset Management Version7.1.1.5
Ibm ≫ Maximo Asset Management Version7.1.1.6
Ibm ≫ Maximo Asset Management Version7.1.1.7
Ibm ≫ Maximo Asset Management Version7.1.1.11
Ibm ≫ Maximo Asset Management Version7.1.1.12
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.39% 0.574
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P