CVE-2013-2998

IBM Maximo Asset Management and SmartCloud Control Desk - Sensitive Information Exposure via Invalid action_code

Title source: llm

Description

frontcontroller.jsp in IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to obtain sensitive information via an invalid action_code.

References (3)

Core 3

Core References

Various Sources vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1IV34110

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21670870

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/84841

Scores

EPSS 0.0095

EPSS Percentile 57.0%

Details

CWE

CWE-200

Status published

Products (26)

ibm/maximo_asset_management 7.1

ibm/maximo_asset_management 7.1.1

ibm/maximo_asset_management 7.1.1.1

ibm/maximo_asset_management 7.1.1.2

ibm/maximo_asset_management 7.1.1.5

ibm/maximo_asset_management 7.1.1.6

ibm/maximo_asset_management 7.1.1.7

ibm/maximo_asset_management 7.1.1.8

ibm/maximo_asset_management 7.1.1.9

ibm/maximo_asset_management 7.1.1.10

... and 16 more

Published May 26, 2014

Tracked Since Feb 18, 2026