CVE

Id
52728  
CVE No.
CVE-2011-4816  
Status
Candidate  
Description
SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.  
Phase
Assigned (20111214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560020 52728 CVE-2011-4816 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21584666  View
560021 52728 CVE-2011-4816 AIXAPAR:IV09194  View
560022 52728 CVE-2011-4816 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1IV09194  View
560023 52728 CVE-2011-4816 XF:maximo-kpi-sql-injection(72001)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35094 JVNDB-2011-005336 D-Link DIR-601 Wireless N150 Home Router のファームウェアにおけるディレクトリトラバーサルの脆弱性 D-Link DIR-601 Wireless N150 Home Router のファームウェアには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-4821 52728 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005336.html  View