CVE-2017-1352

EPSS 0.8%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 set 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by another user that downloads the affected file. IBM X-Force ID: 126538.

Produtos afetados

IBM · Maximo Asset Management

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/126538 http://www.ibm.com/support/docview.wss?uid=swg22006650 http://www.securityfocus.com/bid/100697