Critical severity9.8NVD Advisory· Published Jul 5, 2017· Updated May 13, 2026
CVE-2017-1175
CVE-2017-1175
Description
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297.
Affected products
5cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*
- IBM/Maximo Asset Managementv5Range: 7.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.ibm.com/support/docview.wssnvdVendor Advisory
- www.securityfocus.com/bid/99363nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/123297nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.