What’s Vulnerable › Vulnerabilities

CVE-2014-8927

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-05-25 · updated 2026-06-17
• Weakness: CWE-399

Description

Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset Discovery for Distributed 7.2.2 and 7.5 allows remote attackers to cause a denial of service (CPU consumption or application crash) via a crafted XML query, a different vulnerability than CVE-2014-8926.

Affected products

• IBM Endpoint Manager Family: 9.0
• IBM License Metric Tool: 7.2.2, 7.5, 9.0
• IBM Tivoli Asset Discovery For Distributed: 7.2.2.0, 7.5

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21882695
• http://www-01.ibm.com/support/docview.wss?uid=swg21882695

Get alerted when CVE-2014-8927 or the next vulnerability affects your stack