CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3024

Cross-site request forgery (CSRF) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 through 7.5.0.6 and Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk allows remote authenticated users to hijack the authentication of arbitrary users.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.0%

CVSS Severity

CVSS v2 Score 6.0

References

Products affected by CVE-2014-3024

Ibm » Maximo Asset Management » Version: 7.1

cpe:2.3:a:ibm:maximo_asset_management:7.1
Ibm » Maximo Asset Management » Version: 7.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.1.1
Ibm » Maximo Asset Management » Version: 7.1.1.1

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.1
Ibm » Maximo Asset Management » Version: 7.1.1.10

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.10
Ibm » Maximo Asset Management » Version: 7.1.1.11

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.11
Ibm » Maximo Asset Management » Version: 7.1.1.12

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.12
Ibm » Maximo Asset Management » Version: 7.1.1.2

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.2
Ibm » Maximo Asset Management » Version: 7.1.1.5

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.5
Ibm » Maximo Asset Management » Version: 7.1.1.6

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.6
Ibm » Maximo Asset Management » Version: 7.1.1.7

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.7
Ibm » Maximo Asset Management » Version: 7.1.1.8

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.8
Ibm » Maximo Asset Management » Version: 7.1.1.9

cpe:2.3:a:ibm:maximo_asset_management:7.1.1.9
Ibm » Maximo Asset Management » Version: 7.1.2

cpe:2.3:a:ibm:maximo_asset_management:7.1.2
Ibm » Maximo Asset Management » Version: 7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0
Ibm » Maximo Asset Management » Version: 7.5.0.1

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1
Ibm » Maximo Asset Management » Version: 7.5.0.2

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2
Ibm » Maximo Asset Management » Version: 7.5.0.3

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3
Ibm » Maximo Asset Management » Version: 7.5.0.4

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4
Ibm » Maximo Asset Management » Version: 7.5.0.5

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5
Ibm » Maximo Asset Management » Version: 7.5.0.6

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6
Ibm » Smartcloud Control Desk » Version: 7.5.0.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0
Ibm » Smartcloud Control Desk » Version: 7.5.0.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1
Ibm » Smartcloud Control Desk » Version: 7.5.0.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2
Ibm » Smartcloud Control Desk » Version: 7.5.0.3

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3
Ibm » Smartcloud Control Desk » Version: 7.5.1.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0
Ibm » Smartcloud Control Desk » Version: 7.5.1.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.1
Ibm » Smartcloud Control Desk » Version: 7.5.1.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3024

Products

Pricing

Contact Us