Login Request a demo
Unscored severity · published Mar 13, 2012
CVE-2011-1394
IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and…
–
CVSS
2.5%
EPSS
No
On KEV
Description
IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allow remote attackers to cause a denial of service (memory consumption) by establishing many UI sessions within one HTTP session.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Maximo Asset Management · Ibm
6.2; 7.1; 7.5 · source: NVD
MA
Maximo Asset Management Essentials · Ibm
6.2; 7.1; 7.5 · source: NVD
MS
Maximo Service Desk · Ibm
6.2 · source: NVD
TA
Tivoli Asset Management For IT · Ibm
6.2; 7.1; 7.2 · source: NVD
TC
Tivoli Change And Configuration Management Database · Ibm
6.2; 7.1; 7.2 · source: NVD
TS
Trivoli Service Request Manager · Ibm
7.1; 7.2 · source: NVD
Affected product
MA
Maximo Asset Management
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1394
secunia.com
http://secunia.com/advisories/48299
secunia.com
http://secunia.com/advisories/48305
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV09157
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21584666
www.securityfocus.com
http://www.securityfocus.com/bid/52333
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/71985
More from Maximo Asset Management
9.8
CVE-2023-32333
IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access controls
9.8
CVE-2021-20509
IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection
9.8
CVE-2020-4493
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and issue commands using a specially crafted HTTP command
9.8
CVE-2013-3323
A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the…
9.8
CVE-2017-1175
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection