CVE-2013-3973: SQL Injection
Published Oct 1, 2013
·Updated
SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Software
16 affected components
IBM Maximo Asset Management=7.5.0.0
IBM Maximo Asset Management=7.5.0.1
IBM Maximo Asset Management=7.5.0.2
IBM Maximo Asset Management=7.5.0.3
IBM Maximo Asset Management=7.5.0.4
IBM Maximo Asset Management=7.1
IBM Maximo Asset Management=7.1.1
IBM Maximo Asset Management=7.1.1.1
IBM Maximo Asset Management=7.1.1.2
IBM Maximo Asset Management=7.1.1.5
IBM Maximo Asset Management=7.1.1.6
IBM Maximo Asset Management=7.1.1.7
IBM Maximo Asset Management=7.1.1.8
IBM Maximo Asset Management=7.1.1.9
IBM Maximo Asset Management=7.1.1.10
IBM Maximo Asset Management=7.1.1.11
Event History
Oct 1, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3973?
CVE-2013-3973 is considered a medium to high severity vulnerability due to the potential for remote authenticated users to execute arbitrary SQL commands.
2
How do I fix CVE-2013-3973?
To fix CVE-2013-3973, upgrade IBM Maximo Asset Management to version 7.1.1.12 or 7.5.0.5 or later.
3
Who is affected by CVE-2013-3973?
CVE-2013-3973 affects IBM Maximo Asset Management versions 7.1 and 7.5 prior to specified updates.
4
What type of vulnerability is CVE-2013-3973?
CVE-2013-3973 is an SQL injection vulnerability allowing unauthorized SQL command execution.
5
Can CVE-2013-3973 be exploited remotely?
Yes, CVE-2013-3973 can be exploited by remote authenticated users to execute SQL commands.