CVE-2017-1357
Estado: ModificadaMedia (4.3)—
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.91%
- Percentil entre todas las CVEs puntuadas: 59
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-20
Referencias
- http://www.ibm.com/support/docview.wss?uid=swg22006647
- http://www.securityfocus.com/bid/100214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126684
- http://www.ibm.com/support/docview.wss?uid=swg22006647
- http://www.securityfocus.com/bid/100214
- https://exchange.xforce.ibmcloud.com/vulnerabilities/126684
JSON original (NVD)
Mostrar
{
"id": "CVE-2017-1357",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 1.4,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "IBM",
"product": "Maximo Asset Management",
"versions": [
{
"status": "affected",
"version": "7.5"
},
{
"status": "affected",
"version": "7.6"
}
]
}
]
}
],
"published": "2017-08-09T18:29:01.497",
"references": [
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22006647",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.securityfocus.com/bid/100214",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126684",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg22006647",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/100214",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/126684",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to conduct further advanced attacks. IBM X-Force ID: 126684."
},
{
"lang": "es",
"value": "IBM Maximo Asset Management 7.5 y 7.6 podría permitir que un usuario autenticado manipulase órdenes de trabajo para falsificar correos electrónicos. Esto podría emplearse para llevar a cabo ataques más avanzados. IBM X-Force ID: 126684."
}
],
"lastModified": "2026-06-17T01:14:18.533",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B590C42-21A1-4C62-8293-5A0D7AD628E4"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01604919-877F-4BDF-A137-C1A54E04BEC6"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4577B9CD-45CA-4D01-B99D-7C39131C9C35"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB734EA-42EE-4BE0-934E-9E783BCDA31A"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16981EC3-76AE-441B-92C4-8DD6E6A1EA89"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36BB996E-17BC-4E35-97A0-142946F6B2AD"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA8B991C-2AE4-499D-B173-BF016D7F78F6"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "804A2AD3-94FB-4085-AE08-F7120EDDEFFC"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2659CCD-6D04-4479-BA93-B906DC200424"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C47DB9B3-C8CD-45E9-9F53-617354F3A339"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.5.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB19E05B-1E03-4230-BE05-21A989695749"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B028794E-5FA0-4E3D-AC4D-A2826DD6282C"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "050D798F-F9CC-447B-94F4-81A893349695"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "948B518D-129E-42E7-B07F-5E1CA5056DFA"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7038EBF6-E527-492B-A6A5-14F9A2F79BDF"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29858665-FA68-4EDE-A0E7-6C79E8786871"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5B7CA3C-5F9B-45A3-80AC-F5A4E190CC37"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F5550B7-9133-4434-A01C-0A35E59ECDD5"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management:7.6.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D4B8FE2-799E-4D5F-B582-49E799A3ADDA"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCA89D39-C008-49CD-9D1E-7109644970AB"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F7AF98E-13F3-4D28-9BD1-4D17DFF290D2"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CF1B4FA-A938-4A1C-91C7-21255ACDB0DF"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E5C2A28-739B-42A3-9161-E88BACB1876A"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BB685AE-C72D-41BD-B9E3-0767328EAB73"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BDC50C9-49EF-47CA-88FB-A8BCDF44922B"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7197C12C-5CD7-4F7D-8B38-F792FAABC1FA"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EE096D4-40A8-4FD8-905C-3B13476BF748"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E369397-1BC9-42E3-94AB-1CDB01D4838C"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56F90E1F-C0A0-4D6C-A497-9CC3AAF9ECB4"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF80B092-7E42-4F78-A137-015E382271F3"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "228B8913-D50A-4645-9519-1633D0ACA44C"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A38DFC7-0B96-43F8-88EE-7F8CD29CD41B"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00F10D4F-B0A5-4E40-B3AA-47838343D8C4"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB194228-212C-499F-A3C6-147B5CD89581"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4D2023D-F6A3-4E44-B8C3-4B694A629B01"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48467B08-08D3-4129-9687-A0EC01920694"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A162A9A1-5FF5-47A3-BC80-9577FC8EE00A"
},
{
"criteria": "cpe:2.3:a:ibm:maximo_asset_management_essentials:7.6.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C7DA64E-DAC8-4DE5-8EB7-2FCAD88A8E97"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}