Vulnerability Details CVE-2012-6355
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.3%
CVSS Severity
CVSS v2 Score 6.5
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80747
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384
- http://www-01.ibm.com/support/docview.wss?uid=swg21625624
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80747
Products affected by CVE-2012-6355
-
cpe:2.3:a:ibm:change_and_configuration_management_database:7.1.
-
cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0
-
cpe:2.3:a:ibm:maximo_asset_management:6.2
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.1
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.2
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.3
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.4
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.5
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.6
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.6.1
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.7
-
cpe:2.3:a:ibm:maximo_asset_management:6.2.8
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8
-
cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9
-
cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0
-
cpe:2.3:a:ibm:maximo_asset_management_essentials:6.2.0.0
-
cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0
-
cpe:2.3:a:ibm:maximo_service_desk:6.2
-
cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.0
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:6.2
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.0
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.1
-
cpe:2.3:a:ibm:tivoli_asset_management_for_it:7.2
-
cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0
-
cpe:2.3:a:ibm:tivoli_service_request_manager:7.1.0.0
-
cpe:2.3:a:ibm:tivoli_service_request_manager:7.2.0.0