5.3
CVE-2024-35150
- EPSS 0.27%
- Veröffentlicht 25.01.2025 15:15:08
- Zuletzt bearbeitet 08.07.2025 20:22:34
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
IBM Maximo Application Suite log manipulation
IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is written to logs, which could allow an attacker to inject false log entries.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Maximo Application Suite Version >= 8.10.12 < 8.10.15
Ibm ≫ Maximo Application Suite Version >= 8.11 < 8.11.13
Ibm ≫ Maximo Application Suite Version >= 9.0.1 < 9.0.5
Ibm ≫ Maximo Application Suite Version9.1.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.27% | 0.189 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@us.ibm.com | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
CWE-117 Improper Output Neutralization for Logs
The product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.
https://www.ibm.com/support/pages/node/7180057