CVEvulnerability
CVE-2017-1352
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-09-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-77
Description
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.
Affected configurations
• ibm maximo asset management 7.5
• ibm maximo asset management 7.6
Related
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness
References
- http://www.ibm.com/support/docview.wss?uid=swg22006650 Vendor Advisory
- http://www.securityfocus.com/bid/100697 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538 Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg22006650 Vendor Advisory
- http://www.securityfocus.com/bid/100697 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126538 Third Party Advisory, VDB Entry