CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3026

CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.3%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2014-3026

Ibm » Maximo Asset Management » Version: 7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0
Ibm » Maximo Asset Management » Version: 7.5.0.1

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1
Ibm » Maximo Asset Management » Version: 7.5.0.2

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2
Ibm » Maximo Asset Management » Version: 7.5.0.3

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3
Ibm » Maximo Asset Management » Version: 7.5.0.4

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4
Ibm » Maximo Asset Management » Version: 7.5.0.5

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5
Ibm » Maximo Asset Management » Version: 7.5.0.6

cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.0

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.1

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.2

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.3

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.4

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.5

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5
Ibm » Maximo Asset Management Essentials » Version: 7.5.0.6

cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.6
Ibm » Maximo Industry Solutions » Version: 7.5.0.0

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.0
Ibm » Maximo Industry Solutions » Version: 7.5.0.1

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.1
Ibm » Maximo Industry Solutions » Version: 7.5.0.2

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.2
Ibm » Maximo Industry Solutions » Version: 7.5.0.3

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.3
Ibm » Maximo Industry Solutions » Version: 7.5.0.4

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.4
Ibm » Maximo Industry Solutions » Version: 7.5.0.5

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.5
Ibm » Maximo Industry Solutions » Version: 7.5.0.6

cpe:2.3:a:ibm:maximo_industry_solutions:7.5.0.6
Ibm » Smartcloud Control Desk » Version: 7.5.0.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.0
Ibm » Smartcloud Control Desk » Version: 7.5.0.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.1
Ibm » Smartcloud Control Desk » Version: 7.5.0.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.2
Ibm » Smartcloud Control Desk » Version: 7.5.0.3

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.0.3
Ibm » Smartcloud Control Desk » Version: 7.5.1.0

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.0
Ibm » Smartcloud Control Desk » Version: 7.5.1.1

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.1
Ibm » Smartcloud Control Desk » Version: 7.5.1.2

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.2
Ibm » Smartcloud Control Desk » Version: 7.5.1.3

cpe:2.3:a:ibm:smartcloud_control_desk:7.5.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3026

Products

Pricing

Contact Us