CVE-2012-6355: ibm change_and_configuration_management_database
Vulnerability summary
CVE-2012-6355 is a medium (CVSS 6.5) vulnerability in ibm change_and_configuration_management_database. EPSS estimates a 1.23% chance of exploitation in the next 30 days, higher than 68.5% of scored vulnerabilities.
Timeline
- 20-02-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.23%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
0.00 pp
From 1.23% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm7 products
- change_and_configuration_management_database7.1 | 7.2.0
- maximo_asset_management6.2 | 6.2.1 | 6.2.2 | 6.2.3 | 6.2.4 | 6.2.5 | 6.2.6 | 6.2.6.1 | 6.2.7 | 6.2.8 | 7.1.1 | 7.1.1.1 | 7.1.1.2 | 7.1.1.5 | 7.1.1.6 | 7.1.1.7 | 7.1.1.8 | 7.1.1.9 | 7.1.1.10 | 7.1.1.11 | 7.5.0.0
- maximo_asset_management_essentials6.2.0.0 | 7.5.0.0
- maximo_service_desk6.2
- smartcloud_control_desk7.5.0.0
1 vendor · 7 products