Change And Configuration Management Database vulnerabilities

Product

Change And Configuration Management Database

by Ibm · last CVE Feb 18, 2020

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities40 In the news0 Timeline

Severity mix

Critical 1High 1Medium 5Low 0

Severity

All severities40 Critical1 High1 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Change And Configuration Management Database to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2013-3323	9.8	3%	Feb 18	A Privilege Escalation Vulnerability exists in IBM Maximo Asset Management 7.5, 7.1, and 6.2, when WebSeal with Basic Authentication is used, due to a failure to invalidate the… Affected: 7.1; 7.2
CVE-2015-0104	8.8	7%	Apr 24	IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and… Affected: 7.1; 7.2
CVE-2015-0107	6.5	6%	Apr 24	IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 and Maximo Asset Management and… Affected: 7.1; 7.2
CVE-2015-7448	5.4	1%	Mar 12	SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0… Affected: 7.1; 7.1.1; 7.1.1.2; 7.1.1.3; 7.1.1.4; 7.1.1.5; +9 more
CVE-2015-5017	5.4	1%	Jan 3	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and… Affected: 7.1; 7.2
CVE-2015-5016	4.3	1%	Mar 27	IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain… Affected: 7.1; 7.2
CVE-2015-7487	4.1	0%	Jan 27	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and… Affected: 7.1; 7.2
CVE-2015-4966	–	2%	Nov 8	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 FP009, 7.5.1, and… Affected: 7.1; 7.2
CVE-2015-7395	–	1%	Nov 8	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and… Affected: 7.1; 7.2
CVE-2015-4967	–	1%	Oct 6	SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x… Affected: 7.1; 7.2
CVE-2015-4965	–	1%	Oct 6	maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo… Affected: 7.1; 7.2
CVE-2015-4944	–	1%	Oct 6	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset… Affected: 7.1; 7.2
CVE-2015-1934	–	1%	Oct 4	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX002 and 7.6.0… Affected: 7.1; 7.2
CVE-2015-1933	–	0%	Oct 4	IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX001 and 7.6.0… Affected: 7.1; 7.2
CVE-2015-0109	–	1%	Feb 18	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management… Affected: 7.1; 7.2
CVE-2015-0108	–	1%	Feb 18	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management… Affected: 7.1; 7.2
CVE-2014-6194	–	1%	Feb 17	Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0… Affected: 7.1; 7.2
CVE-2014-6102	–	0%	Feb 17	IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control… Affected: 7.1; 7.2
CVE-2014-4765	–	1%	Oct 2	IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5 through 7.5.0.6, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, and… Affected: 7.1; 7.2
CVE-2014-0825	–	1%	May 26	Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud… Affected: 7.0; 7.1; 7.1.1.7; 7.1.1.11; 7.1.1.12
CVE-2014-0824	–	1%	May 26	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.8 LAFIX.20140319-0839 and 7.1.1.12 before IFIX.20140321-1336 and Tivoli IT Asset… Affected: 7.0; 7.1; 7.1.1.7; 7.1.1.8; 7.1.1.12
CVE-2013-6741	–	1%	May 26	IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and… Affected: 7.1.1.7
CVE-2013-5465	–	1%	May 26	IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and… Affected: 7.1.1.7; 7.1.1.11; 7.1.1.12
CVE-2013-4016	–	1%	May 26	SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x… Affected: 7.1.1.7; 7.1.1.11; 7.1.1.12
CVE-2013-5402	–	1%	Dec 18	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for… Affected: 7.1.1.12; 7.1.2; 7.2; 7.2.0.1
CVE-2012-6355	–	1%	Feb 20	IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1… Affected: 7.1.; 7.2.0
CVE-2012-3328	–	1%	Feb 20	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service… Affected: 7.1.; 7.2.0
CVE-2012-3327	–	1%	Feb 20	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2… Affected: 7.1.; 7.2.0
CVE-2012-3322	–	1%	Feb 20	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2… Affected: 7.1.; 7.2.0
CVE-2012-3316	–	1%	Feb 20	Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2… Affected: 7.1; 7.2.0
CVE-2012-3326	–	1%	Sep 10	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.0; 7.0
CVE-2012-3313	–	1%	Sep 10	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request… Affected: 6.0; 7.0
CVE-2012-2185	–	1%	Sep 10	IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change… Affected: 6.0; 7.0
CVE-2012-2184	–	1%	Sep 10	Session fixation vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.0; 7.0
CVE-2012-2183	–	2%	Sep 10	Session fixation vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.0; 7.0
CVE-2012-0747	–	1%	Sep 10	SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.0; 7.0
CVE-2012-0746	–	1%	Sep 10	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.0; 7.0
CVE-2012-0728	–	1%	Sep 10	SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager,… Affected: 6.0; 7.0
CVE-2012-0727	–	1%	Sep 10	SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service… Affected: 6.0; 7.0
CVE-2012-0714	–	1%	Sep 10	Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service… Affected: 6.0; 7.0