CVE:CVE-2013-4016
CNNVD:CNNVD-201405-495
IBM Maximo Asset Management等都是美国IBM公司的产品。IBM Maximo Asset Management是一套综合性资产生命周期和维护管理解决方案。SmartCloud Control Desk（SCCD）是一套统一资产和服务管理软件。Tivoli Service Request Manager是一套IT服务管理解决方案。
多款IBM产品中存在SQL注入漏洞。远程攻击者可借助带有明文WHERE子句的Birt报告利用该漏洞执行任意SQL命令。以下产品受到影响：IBM Maximo Asset Management 7.1至7.1.1.7版本，7.5.0.0至7.5.0.5版本，7.1.1.11版本，7.1.1.12版本；SmartCloud Control Desk 7.5.0.3之前的7.x版本和7.5.1.2之前的7.5.1.x版本；Tivoli IT Asset Management for IT，Tivoli Service Request Manager，Maximo Service Desk，Change and Configuration Management Database (CCMDB) 7.1至7.1.1.7版本，7.1.1.11版本，7.1.1.12版本。
solution:Upgrade ibm change_and_configuration_management_database to a higher version than 7.1.1.7,7.1.1.11,7.1.1.12,and avoid the version 7.1.1.7,7.1.1.11,7.1.1.12; Upgrade ibm maximo_service_desk to a higher version than 7.1.1.7,7.1.1.11,7.1.1.12,and avoid the version 7.1.1.7,7.1.1.11,7.1.1.12; Upgrade ibm tivoli_asset_management_for_it to a higher version than 7.0,7.1,and avoid the version 7.0,7.1; Upgrade ibm tivoli_it_asset_management_for_it to a higher version than 7.1.1.7,7.1.1.11,7.1.1.12,and avoid the version 7.1.1.7,7.1.1.11,7.1.1.12; Upgrade ibm tivoli_service_request_manager to a higher version than 7.1.1,7.1.1.7,7.1.1.11,7.1.1.12,and avoid the version 7.1.1,7.1.1.7,7.1.1.11,7.1.1.12; Upgrade ibm smartcloud_control_desk to a higher version than 7.0,7.5,7.5.0.0,7.5.0.1,7.5.0.2,7.5.1.0,7.5.1.1,and avoid the version 7.0,7.5,7.5.0.0,7.5.0.1,7.5.0.2,7.5.1.0,7.5.1.1; Upgrade ibm maximo_asset_management to a higher version than 7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,7.1,7.1.1,7.1.1.1,7.1.1.2,7.1.1.5,7.1.1.6,7.1.1.7,7.1.1.11,7.1.1.12,and avoid the version 7.5.0.0,7.5.0.1,7.5.0.2,7.5.0.3,7.5.0.4,7.5.0.5,7.1,7.1.1,7.1.1.1,7.1.1.2,7.1.1.5,7.1.1.6,7.1.1.7,7.1.1.11,7.1.1.12