5.5
CVSSv2

CVE-2015-7396

Published: 02/01/2016 Updated: 07/01/2016
CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8
CVSS v3 Base Score: 5.4 | Impact Score: 2.5 | Exploitability Score: 2.8
VMScore: 490
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N

Vulnerability Summary

The Scheduler in IBM Maximo Asset Management 7.5 prior to 7.5.0.8 IF6 and 7.6 prior to 7.6.0.1 FP1 and Maximo Asset Management 7.5 prior to 7.5.0.8 IF6, 7.5.1, and 7.6 prior to 7.6.0.1 FP1 for SmartCloud Control Desk allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information or modify data, via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm maximo for utilities 7.5

ibm maximo for oil and gas 7.5

ibm maximo for life sciences 7.6

ibm maximo for life sciences 7.5

ibm maximo for transportation 7.5

ibm maximo asset management 7.5

ibm smartcloud control desk 7.5

ibm maximo for government 7.5

ibm maximo asset management 7.6

ibm smartcloud control desk 7.6

ibm maximo for nuclear power 7.5

ibm maximo asset management essentials 7.5