CVE-2013-5465 — IBM Change AND Configuration Management Database vulnerability

CWE-2643 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 39.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
IBM Change AND Configuration Management DatabaseIBM Maximo Asset ManagementIBM Maximo Service Desk+4 more
Timeline
PublishedMay 26
Latest updateMay 17

Description

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.…

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 8.0 | Impact: 6.4

Affected Packages7 packages

▶NVDibm/maximo_asset_management14 versions+13
▶NVDibm/tivoli_it_asset_management7.1.1.11, 7.1.1.12, 7.1.1.7+2
▶NVDibm/maximo_service_desk7.1.1.11, 7.1.1.12, 7.1.1.7+2

🔴Vulnerability Details

2
GHSA
GHSA-w9pg-vq64-hmx5: IBM Maximo Asset Management 7↗2022-05-17
▶
CVEList
CVE-2013-5465: IBM Maximo Asset Management 7↗2014-05-26
▶
CVE-2013-5465 — IBM vulnerability | cvebase