// For flags

CVE-2011-4816

 

Severity Score

6.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Service Request Manager 7.1 and 7.2; IBM Maximo Service Desk 6.2; and IBM Tivoli Change and Configuration Management Database (CCMDB) 6.2, 7.1, and 7.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vulnerabilidad de inyección SQL en el componente KPI de IBM Maximo Asset Management y Asset Management Essentials 6.2, 7.1, y 7.5; IBM Tivoli Asset Management para IT 6.2, 7.1, y 7.2; IBM Tivoli Service Request Manager 7.1 y 7.2; IBM Maximo Service Desk 6.2; y IBM Tivoli Change y Configuration Management Database (CCMDB) 6.2, 7.1, y 7.2 permite a usuarios autenticados remotos ejecutar comandos SQL arbitrarios a través de vectores sin especificar.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2011-12-14 CVE Reserved
  • 2012-03-13 CVE Published
  • 2024-04-01 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Ibm
Search vendor "Ibm"
Maximo Asset Management
Search vendor "Ibm" for product "Maximo Asset Management"
6.2
Search vendor "Ibm" for product "Maximo Asset Management" and version "6.2"
-
Affected
Ibm
Search vendor "Ibm"
Maximo Asset Management
Search vendor "Ibm" for product "Maximo Asset Management"
7.1
Search vendor "Ibm" for product "Maximo Asset Management" and version "7.1"
-
Affected
Ibm
Search vendor "Ibm"
Maximo Asset Management
Search vendor "Ibm" for product "Maximo Asset Management"
7.5
Search vendor "Ibm" for product "Maximo Asset Management" and version "7.5"
-
Affected
Ibm
Search vendor "Ibm"
Maximo Asset Management Essentials
Search vendor "Ibm" for product "Maximo Asset Management Essentials"
6.2
Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "6.2"
-
Affected
Ibm
Search vendor "Ibm"
Maximo Asset Management Essentials
Search vendor "Ibm" for product "Maximo Asset Management Essentials"
7.1
Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.1"
-
Affected
Ibm
Search vendor "Ibm"
Maximo Asset Management Essentials
Search vendor "Ibm" for product "Maximo Asset Management Essentials"
7.5
Search vendor "Ibm" for product "Maximo Asset Management Essentials" and version "7.5"
-
Affected
Ibm
Search vendor "Ibm"
Tivoli Asset Management For It
Search vendor "Ibm" for product "Tivoli Asset Management For It"
6.2
Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "6.2"
-
Affected
Ibm
Search vendor "Ibm"
Tivoli Asset Management For It
Search vendor "Ibm" for product "Tivoli Asset Management For It"
7.1
Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "7.1"
-
Affected
Ibm
Search vendor "Ibm"
Tivoli Asset Management For It
Search vendor "Ibm" for product "Tivoli Asset Management For It"
7.2
Search vendor "Ibm" for product "Tivoli Asset Management For It" and version "7.2"
-
Affected
Ibm
Search vendor "Ibm"
Trivoli Service Request Manager
Search vendor "Ibm" for product "Trivoli Service Request Manager"
7.1
Search vendor "Ibm" for product "Trivoli Service Request Manager" and version "7.1"
-
Affected
Ibm
Search vendor "Ibm"
Trivoli Service Request Manager
Search vendor "Ibm" for product "Trivoli Service Request Manager"
7.2
Search vendor "Ibm" for product "Trivoli Service Request Manager" and version "7.2"
-
Affected
Ibm
Search vendor "Ibm"
Maximo Service Desk
Search vendor "Ibm" for product "Maximo Service Desk"
6.2
Search vendor "Ibm" for product "Maximo Service Desk" and version "6.2"
-
Affected
Ibm
Search vendor "Ibm"
Tivoli Change And Configuration Management Database
Search vendor "Ibm" for product "Tivoli Change And Configuration Management Database"
6.2
Search vendor "Ibm" for product "Tivoli Change And Configuration Management Database" and version "6.2"
-
Affected
Ibm
Search vendor "Ibm"
Tivoli Change And Configuration Management Database
Search vendor "Ibm" for product "Tivoli Change And Configuration Management Database"
7.1
Search vendor "Ibm" for product "Tivoli Change And Configuration Management Database" and version "7.1"
-
Affected
Ibm
Search vendor "Ibm"
Tivoli Change And Configuration Management Database
Search vendor "Ibm" for product "Tivoli Change And Configuration Management Database"
7.2
Search vendor "Ibm" for product "Tivoli Change And Configuration Management Database" and version "7.2"
-
Affected