2016-03-12 16:59:01 2016-03-22 13:00:54

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Ibm Tivoli service request manager 7.2.1.3 (not an official CPE) IBM SmartCloud Control Desk 7.5.1.2 IBM SmartCloud Control Desk 7.5.1.1 IBM SmartCloud Control Desk 7.5.1.3 IBM SmartCloud Control Desk 7.5.1.0 IBM Maximo for Nuclear Power 7.5.0.1 Ibm Change and configuration management database 7.2.0.2 (not an official CPE) IBM Maximo Asset Management 7.1.1 IBM Change and Configuration Management Database (CCMDB) 7.2.0.1 Ibm Change and configuration management database 7.1.1 (not an official CPE) Ibm Tivoli service request manager 7.2.1.6 (not an official CPE) Ibm Tivoli service request manager 7.2.1.5 (not an official CPE) Ibm Tivoli service request manager 7.2.1.4 (not an official CPE) IBM Tivoli Service Request Manager 7.2.1.2 Ibm Tivoli service request manager 7.2.1.1 (not an official CPE) Ibm Maximo for oil and gas 7.5.1 (not an official CPE) IBM Tivoli Service Request Manager 7.2.1.0 Ibm Maximo for transportation 7.1.1.1 (not an official CPE) Ibm Maximo for nuclear power 7.5.1 (not an official CPE) Ibm Tivoli asset management for it 7.2.2.2 (not an official CPE) IBM Maximo for Life Sciences 7.1 Ibm Tivoli asset management for it 7.2.2.1 (not an official CPE) Ibm Maximo asset management essentials 7.5 (not an official CPE) IBM Maximo Asset Management 7.5.0.8 Ibm Maximo asset management 7.5.0.9 (not an official CPE) IBM Maximo Asset Management 7.5.0.6 IBM Maximo Asset Management 7.5.0.7 IBM Tivoli Asset Management for IT 7.1 IBM Tivoli Asset Management for IT 7.2 Ibm Maximo for government 7.1.1 (not an official CPE) IBM Maximo Asset Management 7.1.1.9 Ibm Maximo for transportation 7.1.0.1 (not an official CPE) IBM Maximo Asset Management Essentials 7.5.0.4 IBM Maximo Asset Management 7.5.0.4 IBM Maximo Asset Management Essentials 7.5.0.5 IBM Maximo Asset Management 7.5.0.5 Ibm Maximo for oil and gas 7.1.0.1 (not an official CPE) IBM Maximo Asset Management Essentials 7.5.0.2 IBM Maximo Asset Management 7.5.0.2 IBM Maximo Asset Management Essentials 7.5.0.3 IBM Maximo Asset Management 7.5.0.3 Ibm Maximo for transportation 7.6.0.0 (not an official CPE) IBM Maximo Asset Management Essentials 7.5.0.0 IBM Maximo Asset Management 7.5.0.0 IBM Maximo Asset Management Essentials 7.5.0.1 IBM Maximo Asset Management 7.5.0.1 IBM SmartCloud Control Desk 7.5 Ibm Smartcloud control desk 7.6 (not an official CPE) IBM Change and Configuration Management Database (CCMDB) 7.2.1.2 Ibm Change and configuration management database 7.2.1.1 (not an official CPE) Ibm Maximo for life sciences 7.5 (not an official CPE) Ibm Maximo for life sciences 7.6 (not an official CPE) Ibm Maximo asset management essentials 7.5.0.8 (not an official CPE) Ibm Maximo asset management essentials 7.5.0.9 (not an official CPE) Ibm Change and configuration management database 7.2.1.4 (not an official CPE) IBM Maximo Asset Management Essentials 7.5.0.6 Ibm Maximo asset management essentials 7.5.0.7 (not an official CPE) IBM Tivoli Service Request Manager 7.2.0.1 Ibm Change and configuration management database 7.2.1.3 (not an official CPE) IBM Maximo for Transportation 7.1 Ibm Smartcloud control desk 7.6.0.1 (not an official CPE) Ibm Tivoli service request manager 7.1.0.1 (not an official CPE) Ibm Maximo for oil and gas 7.1.1.0 (not an official CPE) Ibm Maximo for nuclear power 7.5 (not an official CPE) Ibm Smartcloud control desk 7.5.3.1 (not an official CPE) IBM Maximo for Nuclear Power 7.1 Ibm Maximo for energy optimization 7.1 (not an official CPE) Ibm Maximo for transportation 7.5.1.0 (not an official CPE) IBM Tivoli Service Request Manager 7.1.0 Ibm Maximo for oil and gas 7.1.2 (not an official CPE) Ibm Smartcloud control desk 7.5.3 (not an official CPE) IBM Tivoli Asset Management for IT 7.2.0.1 IBM Maximo for Utilities 7.1 Ibm Maximo for utilities 7.5 (not an official CPE) Ibm Change and configuration management database 7.1.1.4 (not an official CPE) IBM Maximo Asset Management 7.1.1.2 IBM Maximo Asset Management 7.1.1.1 Ibm Maximo for nuclear power 7.1.1 (not an official CPE) Ibm Change and configuration management database 7.1.1.5 (not an official CPE) IBM SmartCloud Control Desk 7.5.0.3 IBM Maximo Asset Management 7.1.1.6 IBM Tivoli Asset Management for IT 7.2.2 IBM SmartCloud Control Desk 7.5.0.2 IBM Maximo Asset Management 7.1.1.5 IBM Maximo Asset Management 7.1.1.8 Ibm Change and configuration management database 7.1.1.6 (not an official CPE) IBM Maximo Asset Management 7.1.1.7 IBM Change and Configuration Management Database (CCMDB) 7.2 Ibm Change and configuration management database 7.1.1.3 (not an official CPE) IBM SmartCloud Control Desk 7.5.0.1 Ibm Change and configuration management database 7.1.1.2 (not an official CPE) Ibm Maximo asset management 7.6.0.1 (not an official CPE) Ibm Maximo asset management 7.6.0.2 (not an official CPE) Ibm Maximo asset management 7.6.0.3 (not an official CPE) Ibm Change and configuration management database 7.2.1 (not an official CPE) IBM Change and Configuration Management Database (CCMDB) 7.1 IBM Maximo for Transportation 7.5.0.0 IBM Maximo Asset Management Essentials 7.1 IBM Maximo Asset Management 7.6.0.0 IBM Tivoli Service Request Manager 7.2 IBM Maximo for Utilities 7.5.0.1 IBM Maximo for Oil and Gas 7.1 Ibm Maximo for transportation 7.1.1 (not an official CPE) Ibm Maximo for oil and gas 7.5 (not an official CPE) Ibm Tivoli service request manager 7.1.0.2 (not an official CPE) Ibm Tivoli service request manager 7.1.0.4 (not an official CPE) Ibm Tivoli service request manager 7.1.0.3 (not an official CPE) IBM Tivoli Asset Management for IT 7.2.1.0 IBM Tivoli Asset Management for IT 7.2.1.2 IBM Maximo Asset Management 7.1 IBM Maximo Asset Management 7.1.1.10 Ibm Tivoli service request manager 7.1.0.5 (not an official CPE) IBM Maximo Asset Management 7.1.1.11 IBM Maximo Asset Management 7.1.1.12 IBM Maximo Asset Management 7.1.1.13 IBM Maximo for Government 7.1 Ibm Maximo for utilities 7.1.1 (not an official CPE) Ibm Maximo for utilities 7.1.2 (not an official CPE) Ibm Maximo for government 7.5 (not an official CPE)