Vulnerability Details CVE-2017-1352
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.1%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 6.0
References
- http://www.ibm.com/support/docview.wss?uid=swg22006650
- http://www.securityfocus.com/bid/100697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538
- http://www.ibm.com/support/docview.wss?uid=swg22006650
- http://www.securityfocus.com/bid/100697
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538
Products affected by CVE-2017-1352
-
cpe:2.3:a:ibm:maximo_asset_management:7.5
-
cpe:2.3:a:ibm:maximo_asset_management:7.6