cbcvebase.
CVE-2012-3333
published 2014-05-26

CVE-2012-3333: CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows…

medium4.3CVSS 3.1
AVNACMAuNCNIPAN
CRLF injection vulnerability in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted parameter in a URL.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmmaximo_asset_management
ibmsmartcloud_control_desk
ibmsmartcloud_control_desk
ibmsmartcloud_control_desk
ibmsmartcloud_control_desk
ibmsmartcloud_control_desk
ibmsmartcloud_control_desk