unicenter asset management vulnerabilities and fixes

Recent CVEs affecting unicenter asset management, with upgrade or downgrade steps. 4 tracked.

Also searched as: unicenterassetmanagement.

unicenter asset management has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2008-04-16. Highest priority: CVE-2008-1786 (score 56/100).

• CVE-2008-1786 HIGH 9.3 DOWNGRADE DOWNGRADE The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor
• CVE-2005-0642 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM
• CVE-2005-0641 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Manageme
• CVE-2005-0640 MEDIUM 4.6 DOWNGRADE Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credent

FAQ

How do I fix unicenter asset management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unicenter asset management being exploited right now?

None of the tracked unicenter asset management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unicenter asset management CVE should I patch first?

CVE-2008-1786 currently ranks highest (56/100): The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor .

RSS feed for unicenter asset management · ← Back to latest CVEs