CVE-2013-5465

Name: CVE-2013-5465
Creator: NVD / NIST
Published: 2014-05-26T16:55:02.927+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.23%

Last modified Jun 16, 2026

CVE-2013-5465 is a vulnerability of currently unknown severity. IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.. EPSS estimates a 1.23% chance of exploitation in the next 30 days.

Description

IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.

Metrics

EPSS Probability

1.23%

65.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-264

Affected Software

Vendor	Product	Versions
Ibm	Maximo Asset Management	7.5.0.0
Ibm	Maximo Asset Management	7.5.0.1
Ibm	Maximo Asset Management	7.5.0.2
Ibm	Maximo Asset Management	7.5.0.3
Ibm	Maximo Asset Management	7.5.0.4
Ibm	Change And Configuration Management Database	7.1.1.7
Ibm	Change And Configuration Management Database	7.1.1.11
Ibm	Change And Configuration Management Database	7.1.1.12
Ibm	Maximo Service Desk	7.1.1.7
Ibm	Maximo Service Desk	7.1.1.11
Ibm	Maximo Service Desk	7.1.1.12
Ibm	Tivoli Asset Management For It	7.0
Ibm	Tivoli Asset Management For It	7.1
Ibm	Tivoli It Asset Management For It	7.1.1.7
Ibm	Tivoli It Asset Management For It	7.1.1.11
Ibm	Tivoli It Asset Management For It	7.1.1.12
Ibm	Tivoli Service Request Manager	7.1.1
Ibm	Tivoli Service Request Manager	7.1.1.7
Ibm	Tivoli Service Request Manager	7.1.1.11
Ibm	Tivoli Service Request Manager	7.1.1.12
Ibm	Smartcloud Control Desk	7.0
Ibm	Smartcloud Control Desk	7.5
Ibm	Smartcloud Control Desk	7.5.0.0
Ibm	Smartcloud Control Desk	7.5.0.1
Ibm	Smartcloud Control Desk	7.5.0.2
Ibm	Smartcloud Control Desk	7.5.1.0
Ibm	Smartcloud Control Desk	7.5.1.1
Ibm	Maximo Asset Management	7.1
Ibm	Maximo Asset Management	7.1.1
Ibm	Maximo Asset Management	7.1.1.1
Ibm	Maximo Asset Management	7.1.1.2
Ibm	Maximo Asset Management	7.1.1.5
Ibm	Maximo Asset Management	7.1.1.6
Ibm	Maximo Asset Management	7.1.1.7
Ibm	Maximo Asset Management	7.1.1.11
Ibm	Maximo Asset Management	7.1.1.12

References

Timeline

Published: May 26, 2014
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2013-5465?

How severe is CVE-2013-5465?

Severity scoring for CVE-2013-5465 is pending analysis. The EPSS model estimates a 1.23% probability of exploitation in the next 30 days.

How do I fix CVE-2013-5465?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2013-5465?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST