8.7
High
CVE-2026-18529 IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command…
Description
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Maximo Application Suite - Location Service for Esri Component | 9.2 | No fix stated |
| Maximo Application Suite - Location Service for Esri Component | 9.1 | No fix stated |
| Maximo Application Suite - Location Service for Esri Component | 9.0 | No fix stated |
Other CVEs of Maximo Application Suite - Location Service for Esri Component
The 5 CVEs of Maximo Application Suite - Location Service for Esri Component →
CVE-2026-18513
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access…
7.2
High
CVE-2026-18517
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite —…
7.7
High
CVE-2026-18533
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input…
6.5
Medium
CVE-2026-18537
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input…
8.7
High