5.5

CVE-2015-7396

The Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Maximo Asset Management Version 7.5
Ibm ≫ Maximo Asset Management Version 7.6
Ibm ≫ Maximo For Government Version 7.5
Ibm ≫ Maximo For Life Sciences Version 7.5
Ibm ≫ Maximo For Life Sciences Version 7.6
Ibm ≫ Maximo For Nuclear Power Version 7.5
Ibm ≫ Maximo For Oil And Gas Version 7.5
Ibm ≫ Maximo For Transportation Version 7.5
Ibm ≫ Maximo For Utilities Version 7.5
Ibm ≫ Smartcloud Control Desk Version 7.5
Ibm ≫ Smartcloud Control Desk Version 7.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.79% 0.514
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.8 2.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21970799
Vendor Advisory