5

CVE-2014-4765

EPSS 1.17%
Veröffentlicht 02.10.2014 00:55:03
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and Maximo Asset Management 7.1 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote attackers to obtain sensitive directory information by reading an unspecified error message.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 48 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Change And Configuration Management Database Version 7.1

Ibm ≫ Change And Configuration Management Database Version 7.2

Ibm ≫ Maximo Asset Management Version 7.1

Ibm ≫ Maximo Asset Management Version 7.1.1

Ibm ≫ Maximo Asset Management Version 7.1.1.1

Ibm ≫ Maximo Asset Management Version 7.1.1.2

Ibm ≫ Maximo Asset Management Version 7.1.1.5

Ibm ≫ Maximo Asset Management Version 7.1.1.6

Ibm ≫ Maximo Asset Management Version 7.1.1.7

Ibm ≫ Maximo Asset Management Version 7.1.1.8

Ibm ≫ Maximo Asset Management Version 7.1.1.9

Ibm ≫ Maximo Asset Management Version 7.1.1.10

Ibm ≫ Maximo Asset Management Version 7.1.1.11

Ibm ≫ Maximo Asset Management Version 7.1.1.12

Ibm ≫ Maximo Asset Management Version 7.1.1.13

Ibm ≫ Maximo Asset Management Version 7.1.2

Ibm ≫ Maximo Asset Management Version 7.5.0.0

Ibm ≫ Maximo Asset Management Version 7.5.0.1

Ibm ≫ Maximo Asset Management Version 7.5.0.2

Ibm ≫ Maximo Asset Management Version 7.5.0.3

Ibm ≫ Maximo Asset Management Version 7.5.0.4

Ibm ≫ Maximo Asset Management Version 7.5.0.5

Ibm ≫ Maximo Asset Management Version 7.5.0.6

Ibm ≫ Maximo Asset Management Version 7.5.0.10

Ibm ≫ Maximo Asset Management Essentials Version 7.1

Ibm ≫ Maximo Asset Management Essentials Version 7.5.0.0

Ibm ≫ Maximo For Government Version 7.1

Ibm ≫ Maximo For Government Version 7.5.0.0

Ibm ≫ Maximo For Life Sciences Version 7.1

Ibm ≫ Maximo For Life Sciences Version 7.5.0.0

Ibm ≫ Maximo For Nuclear Power Version 7.1

Ibm ≫ Maximo For Nuclear Power Version 7.5.0.0

Ibm ≫ Maximo For Oil And Gas Version 7.1

Ibm ≫ Maximo For Oil And Gas Version 7.5.0.0

Ibm ≫ Maximo For Transportation Version 7.1

Ibm ≫ Maximo For Transportation Version 7.5.0.0

Ibm ≫ Maximo For Utilities Version 7.1

Ibm ≫ Maximo For Utilities Version 7.5.0.0

Ibm ≫ Smartcloud Control Desk Version 7.5.0.1

Ibm ≫ Smartcloud Control Desk Version 7.5.0.2

Ibm ≫ Smartcloud Control Desk Version 7.5.0.3

Ibm ≫ Smartcloud Control Desk Version 7.5.0.5

Ibm ≫ Smartcloud Control Desk Version 7.5.1.0

Ibm ≫ Smartcloud Control Desk Version 7.5.1.1

Ibm ≫ Tivoli Asset Management For It Version 7.1

Ibm ≫ Tivoli Asset Management For It Version 7.2

Ibm ≫ Tivoli Service Request Manager Version 7.1

Ibm ≫ Tivoli Service Request Manager Version 7.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.17%	0.634

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www-01.ibm.com/support/docview.wss?uid=swg21685289

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/94757

https://nvd.nist.gov/vuln/detail/CVE-2014-4765

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4765

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4765

EUVD