What’s Vulnerable › Vulnerabilities

CVE-2015-5016

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-27 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products allow remote authenticated users to bypass intended access restrictions and read arbitrary ticket worklog entries via unspecified vectors. IBM X-Force ID: 106460.

Affected products

• IBM Change And Configuration Management Database: 7.1, 7.2
• IBM Control Desk: 7.5, 7.6
• IBM Maximo Asset Management: 7.1, 7.5, 7.6
• IBM Maximo Asset Management Essentials: 7.1, 7.5
• IBM Maximo For Aviation: 7.6
• IBM Maximo For Energy Optimization: 7.1
• IBM Maximo For Government: 7.1, 7.5
• IBM Maximo For Life Sciences: 7.1, 7.5, 7.6
• IBM Maximo For Nuclear Power: 7.1, 7.5
• IBM Maximo For Oil And Gas: 7.1, 7.5
• IBM Maximo For Transportation: 7.1, 7.5, 7.6
• IBM Maximo For Utilities: 7.1, 7.5
• IBM Tivoli Asset Management For It: 7.1, 7.2
• IBM Tivoli Service Request Manager: 7.1, 7.2

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21971160
• https://exchange.xforce.ibmcloud.com/vulnerabilities/106460
• http://www-01.ibm.com/support/docview.wss?uid=swg21971160
• https://exchange.xforce.ibmcloud.com/vulnerabilities/106460

Get alerted when CVE-2015-5016 or the next vulnerability affects your stack