CVE-2017-1357

MEDIUM

IBM Maximo Asset Mgmt <7.6 - Privilege Escalation

Title source: llm

Description

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684.

References (3)

Scores

CVSS v3 4.3
EPSS 0.0022
EPSS Percentile 43.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-20
Status published
Products (40)
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
ibm/maximo_asset_management
... and 30 more
Published Aug 09, 2017
Tracked Since Feb 18, 2026