cbcvebase.
CVE-2014-3026
published 2014-07-29

CVE-2014-3026: CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk…

PriorityP417low3.5CVSS 2.0
AVNACMAuSCNIPAN
EPSS
0.95%
57.1th percentile
CRLF injection vulnerability in IBM Maximo Asset Management 7.5 through 7.5.0.6, and 7.5 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management_essentials——
ibmmaximo_asset_management_essentials——
ibmmaximo_asset_management_essentials——
ibmmaximo_asset_management_essentials——
ibmmaximo_asset_management_essentials——
ibmmaximo_asset_management_essentials——
ibmmaximo_asset_management_essentials——
ibmmaximo_industry_solutions——
ibmmaximo_industry_solutions——
ibmmaximo_industry_solutions——
ibmmaximo_industry_solutions——
ibmmaximo_industry_solutions——
ibmmaximo_industry_solutions——
ibmmaximo_industry_solutions——
ibmsmartcloud_control_desk——
ibmsmartcloud_control_desk——
ibmsmartcloud_control_desk——
ibmsmartcloud_control_desk——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.