CVE-2012-0747: SQL Injection
SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB), allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0747?
CVE-2012-0747 has a medium severity rating, which allows for SQL injection by authenticated users in various IBM applications.
How do I fix CVE-2012-0747?
To fix CVE-2012-0747, upgrade to the latest patched version of the affected IBM software.
Which versions of IBM software are affected by CVE-2012-0747?
CVE-2012-0747 affects IBM Maximo Asset Management versions 6.2 through 7.5 and several Tivoli products.
Can CVE-2012-0747 be exploited remotely?
Yes, CVE-2012-0747 can be exploited remotely by authenticated users through SQL injection.
What impact does CVE-2012-0747 have on users?
CVE-2012-0747 can allow authenticated users to execute arbitrary SQL commands, possibly leading to data exposure or corruption.