8.2
Élevée
CVE-2024-27266 IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing…
Description
IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 284566.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Maximo Asset Management | 7.6.1.3 | Pas de correctif indiqué |
| maximo_application_suite | 7.6.1.3 | Pas de correctif indiqué |
Autres CVE de Maximo Asset Management
Les 81 CVE de Maximo Asset Management →
CVE-2025-2986
IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting
5.5
Moyenne
CVE-2025-2987
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF)
3.8
Faible
CVE-2024-45077
IBM Maximo Asset Management 7.6.1.3 MXAPIASSET API is vulnerable to unrestricted file upload which allows…
6.5
Moyenne
CVE-2024-45652
IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system
6.5
Moyenne