CVE-2013-0451: SQL Injection
Published Oct 1, 2013
·Updated
SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Software
22 affected components
IBM Maximo Asset Management=6.2
IBM Maximo Asset Management=6.2.1
IBM Maximo Asset Management=6.2.2
IBM Maximo Asset Management=6.2.3
IBM Maximo Asset Management=6.2.4
IBM Maximo Asset Management=6.2.5
IBM Maximo Asset Management=6.2.6
IBM Maximo Asset Management=6.2.6.1
IBM Maximo Asset Management=6.2.7
IBM Maximo Asset Management=6.2.8
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
IBM Maximo Asset Management=7.1.1.12
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0451?
CVE-2013-0451 has a high severity rating due to its potential for remote authenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2013-0451?
To mitigate CVE-2013-0451, update IBM Maximo Asset Management to a version that addresses this SQL injection vulnerability.
3
Who is affected by CVE-2013-0451?
CVE-2013-0451 affects users of IBM Maximo Asset Management versions 6.2 through 6.2.8 and 7.1 through 7.1.1.12.
4
What type of vulnerability is CVE-2013-0451?
CVE-2013-0451 is classified as an SQL injection vulnerability.
5
What can attackers do with CVE-2013-0451?
Attackers exploiting CVE-2013-0451 can execute arbitrary SQL commands, potentially compromising the database.