Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:change_and_configuration_management_database:7.2.0:*:*:*:*:*:*:*

part: a version: 7.2.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductChange And Configuration Management Database (6e1f0d7a-2595-55df-9e8c-702a0562184a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6355 vulnerable 2026-06-08 05:03:00.026887 Details available
IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T21:28:39.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3328 vulnerable 2026-06-08 05:02:09.200450 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1, Maximo Asset Management Essentials 7.1, Tivoli Asset Management for IT 7.1 and 7.2, Tivoli Service Request Manager 7.1 and 7.2, and Change and Configuration Management Database (CCMDB) 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden frame footer.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T20:05:10.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3327 vulnerable 2026-06-08 05:02:09.200035 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to a login action.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T20:05:10.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3322 vulnerable 2026-06-08 05:02:09.177021 Details available
Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to a display name.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T20:05:10.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3316 vulnerable 2026-06-08 05:02:09.156485 Details available
Cross-site scripting (XSS) vulnerability in the Tivoli Process Automation Engine (TPAE) in IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-02-20T11:00:00.000Z
Updated: 2024-08-06T19:57:50.512Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.