| CVE-2026-105052 |
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on…
|
7.5
High
|
Oct 12, 2026 |
| CVE-2026-15656 |
IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session…
|
4.3
Medium
|
Aug 5, 2026 |
| CVE-2026-18531 |
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the…
|
5.3
Medium
|
Aug 5, 2026 |
| CVE-2026-4820 |
IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or…
|
4.3
Medium
|
Apr 1, 2026 |
| CVE-2025-2898 |
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to…
|
7.5
High
|
May 6, 2025 |
| CVE-2023-43037 |
IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to…
|
6.5
Medium
|
Apr 10, 2025 |
| CVE-2025-1500 |
IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be…
|
5.5
Medium
|
Apr 5, 2025 |
| CVE-2024-35150 |
IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2024-35148 |
IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection
|
6.3
Medium
|
Jan 25, 2025 |
| CVE-2024-35144 |
IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid…
|
5.3
Medium
|
Jan 25, 2025 |
| CVE-2024-35145 |
IBM Maximo Application Suite 9.0.0 - Monitor Component is vulnerable to cross-site scripting
|
6.1
Medium
|
Jan 25, 2025 |
| CVE-2024-35146 |
IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 6, 2024 |
| CVE-2024-37068 |
IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms…
|
5.9
Medium
|
Sep 7, 2024 |
| CVE-2024-22333 |
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally…
|
3.3
Low
|
Jun 13, 2024 |
| CVE-2024-22328 |
IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system
|
7.5
High
|
Apr 6, 2024 |
| CVE-2023-32335 |
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL…
|
3.7
Low
|
Mar 13, 2024 |
| CVE-2023-32332 |
IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection
|
5.4
Medium
|
Sep 8, 2023 |
| CVE-2023-32334 |
IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in…
|
3.7
Low
|
Jun 5, 2023 |
| CVE-2023-27861 |
IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that…
|
5.9
Medium
|
Jun 5, 2023 |
| CVE-2022-35645 |
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to…
|
6.4
Medium
|
Mar 2, 2023 |
| CVE-2022-43923 |
IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user
|
6.2
Medium
|
Feb 24, 2023 |