Vulnerability Details CVE-2012-3325
IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.6%
CVSS Severity
CVSS v2 Score 6.0
Products affected by CVE-2012-3325
-
cpe:2.3:a:ibm:websphere_application_server:6.1
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.0
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.1
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.11
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.12
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.15
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.17
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.19
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.2
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.21
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.23
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.25
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.27
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.29
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.3
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.31
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.33
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.35
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.37
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.39
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.41
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.43
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.5
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.7
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.9
-
cpe:2.3:a:ibm:websphere_application_server:6.1.1
-
cpe:2.3:a:ibm:websphere_application_server:6.1.13
-
cpe:2.3:a:ibm:websphere_application_server:6.1.14
-
cpe:2.3:a:ibm:websphere_application_server:6.1.3
-
cpe:2.3:a:ibm:websphere_application_server:6.1.5
-
cpe:2.3:a:ibm:websphere_application_server:6.1.6
-
cpe:2.3:a:ibm:websphere_application_server:6.1.7
-
cpe:2.3:a:ibm:websphere_application_server:7.0
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.1
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.11
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.13
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.15
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.17
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.19
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.2
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.21
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.23
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.3
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.4
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.5
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.6
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.7
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.8
-
cpe:2.3:a:ibm:websphere_application_server:7.0.0.9
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.0
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.1
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.2
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.3
-
cpe:2.3:a:ibm:websphere_application_server:8.0.0.4
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.0