7.5
Élevée
CVE-2026-105052 IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on…
Description
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Maximo Application Suite | 9.2 | Pas de correctif indiqué |
| Maximo Application Suite | 9.1 | Pas de correctif indiqué |
| Maximo Application Suite | 9.0 | Pas de correctif indiqué |
| Maximo Application Suite | 8.11 | Pas de correctif indiqué |
| Maximo Application Suite | 8.10 | Pas de correctif indiqué |
Autres CVE de Maximo Application Suite
Les 21 CVE de Maximo Application Suite →
CVE-2026-15656
IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session…
4.3
Moyenne
CVE-2026-18531
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the…
5.3
Moyenne
CVE-2026-4820
IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or…
4.3
Moyenne
CVE-2025-2898
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to…
7.5
Élevée