CVE-2017-1352

EPSS 0.8%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 sep 2017Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

Productos afectados

IBM · Maximo Asset Management

Referencias

https://exchange.xforce.ibmcloud.com/vulnerabilities/126538 http://www.ibm.com/support/docview.wss?uid=swg22006650 http://www.securityfocus.com/bid/100697