Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv2c-v9gm-w42j

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

EPSS

Процентиль: 55%
0.00328
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 5.5
nvd
больше 8 лет назад

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

EPSS

Процентиль: 55%
0.00328
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-77