CVE-2017-1175

Critical

Published: 05/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM Maximo Asset Management versions 7.1, 7.5, and 7.6 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.

Risk Assessment

This vulnerability poses a serious risk to the integrity and confidentiality of data within the organization, allowing attackers unauthorized access to sensitive information.

Recommendation

It is recommended to upgrade to the latest version of IBM Maximo Asset Management and implement appropriate security measures to mitigate the risk of SQL injection attacks.

Original NVD description (English source)

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297.