cbcvebase.
CVE-2015-4967
published 2015-10-06

CVE-2015-4967: SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset…

PriorityP338medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
0.99%
58.7th percentile
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected

81 ranges· showing 25
VendorProductVersion rangeFixed in
ibmchange_and_configuration_management_database——
ibmchange_and_configuration_management_database——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
ibmmaximo_asset_management——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.