Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:smartcloud_control_desk:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSmartcloud Control Desk (5b26839e-7ec6-52b2-a0b4-64e85054bf47)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3084 vulnerable 2026-06-08 05:05:31.047810 Details available
IBM Maximo Asset Management 6.1 through 6.5, 7.1 through 7.1.1.13, and 7.5 through 7.5.0.6; Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control Desk; and Maximo Asset Management 6.2.8, 7.1, and 7.2 for Tivoli IT Asset Management for IT and certain other products allow remote authenticated users to bypass intended write-access restrictions on calendar entries via unspecified vectors.
Published: 2014-08-29T10:00:00.000Z
Updated: 2024-08-06T10:35:55.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0893 vulnerable 2026-06-08 05:05:14.978054 Details available
Cross-site scripting (XSS) vulnerability in customreport.jsp in IBM Maximo Asset Management 7.5.x before 7.5.0.5 IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.
Published: 2014-05-26T16:00:00.000Z
Updated: 2024-08-06T09:27:20.285Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0849 vulnerable 2026-06-08 05:05:14.723063 Details available
IBM Maximo Asset Management 7.x before 7.5.0.3 IFIX027 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to gain privileges by leveraging membership in two security groups.
Published: 2014-05-26T16:00:00.000Z
Updated: 2024-08-06T09:27:20.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0825 vulnerable 2026-06-08 05:05:14.598981 Details available
Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.12 IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via a crafted report parameter.
Published: 2014-05-26T16:00:00.000Z
Updated: 2024-08-06T09:27:20.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6741 vulnerable 2026-06-08 05:05:06.841179 Details available
IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837 allow remote authenticated users to obtain potentially sensitive stack-trace information by triggering a Birt error.
Published: 2014-05-26T16:00:00.000Z
Updated: 2024-08-06T17:46:22.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5465 vulnerable 2026-06-08 05:04:51.767144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5464 vulnerable 2026-06-08 05:04:51.756589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5460 vulnerable 2026-06-08 05:04:51.742658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4016 vulnerable 2026-06-08 05:04:33.573315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2998 vulnerable 2026-06-08 05:04:29.779326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3333 vulnerable 2026-06-08 05:02:09.223143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3326 vulnerable 2026-06-08 05:02:09.198562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3313 vulnerable 2026-06-08 05:02:09.127921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2185 vulnerable 2026-06-08 05:00:53.199734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2184 vulnerable 2026-06-08 05:00:53.199167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2183 vulnerable 2026-06-08 05:00:53.198601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0747 vulnerable 2026-06-08 05:00:44.714844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0746 vulnerable 2026-06-08 05:00:44.714248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0728 vulnerable 2026-06-08 05:00:44.645712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0727 vulnerable 2026-06-08 05:00:44.645137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0714 vulnerable 2026-06-08 05:00:44.599982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.