CVSS 3.0
4.1 mediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:NCVE-2015-7487
Medium (4.1) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.
IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX002, 7.5.1, and 7.6.0 before 7.6.0.3 IFIX001 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for Tivoli IT Asset Management for IT and certain other products allow local users to obtain sensitive information by leveraging administrative privileges and reading log files.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:change_and_configuration_management_database
- ibm:maximo_asset_management
- ibm:maximo_asset_management_essentials
- ibm:maximo_for_energy_optimization
- ibm:maximo_for_government
- ibm:maximo_for_life_sciences
- ibm:maximo_for_nuclear_power
- ibm:maximo_for_oil_and_gas
- ibm:maximo_for_transportation
- ibm:maximo_for_utilities
- ibm:smartcloud_control_desk
- ibm:tivoli_asset_management_for_it
- ibm:tivoli_service_request_manager