CVE-2023-47718

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
8.8HIGH
EPSS
0.0%
top 87.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Maximo Application SuiteIBM Maximo Asset ManagementIBM Maximo Asset Management Manage Component
Timeline
PublishedJan 19

Description

IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 271843.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5ibm/maximo_asset_management7.6.1.3
▶NVDibm/maximo_application_suite8.10 — 8.10.6+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-j63j-p6ch-vcfc: IBM Maximo Asset Management 7↗2024-01-19
▶
CVEList
IBM Maximo Asset Management cross-site request forgery↗2024-01-19
▶
CVE-2023-47718 (HIGH CVSS 8.8) | IBM Maximo Asset Management 7.6.1.3 | cvebase.io