{"id":"CVE-2012-6355","url":"https://www.cyber-defence.io/tools/cve/CVE-2012-6355","generatedAt":"2026-10-27T17:56:31.382Z","title":"IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management…","description":"IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Service Desk 6.2, Change and Configuration Management Database (CCMDB) 7.1 and 7.2, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to a work order.","published":"2013-02-20T12:09:22.000Z","lastModified":"2026-06-16T23:48:03.000Z","status":"Modified","sourceIdentifier":"psirt@us.ibm.com","cvss":{"version":"2.0","score":6.5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P"},"cwe":["CWE-264"],"affected":["ibm/maximo asset management","ibm/maximo asset management essentials","ibm/tivoli asset management for it","ibm/tivoli service request manager","ibm/maximo service desk","ibm/change and configuration management database","ibm/smartcloud control desk"],"epss":{"score":0.01231,"percentile":0.68764,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (1.23%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21625624","tags":["Vendor Advisory"],"source":"psirt@us.ibm.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80747","source":"psirt@us.ibm.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV30384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21625624","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80747","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-6355","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}