| CVE-2026-105052 |
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on…
|
7.5
Élevée
|
12 oct. 2026 |
| CVE-2026-15656 |
IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session…
|
4.3
Moyenne
|
5 août 2026 |
| CVE-2026-18531 |
IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the…
|
5.3
Moyenne
|
5 août 2026 |
| CVE-2026-4820 |
IBM Maximo Application Suite 9.1, 9.0, 8.11, and 8.10 does not set the secure attribute on authorization tokens or…
|
4.3
Moyenne
|
1 avr. 2026 |
| CVE-2025-2898 |
IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to…
|
7.5
Élevée
|
6 mai 2025 |
| CVE-2023-43037 |
IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to…
|
6.5
Moyenne
|
10 avr. 2025 |
| CVE-2025-1500 |
IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be…
|
5.5
Moyenne
|
5 avr. 2025 |
| CVE-2024-35150 |
IBM Maximo Application Suite 8.10.12, 8.11.0, 9.0.1, and 9.1.0 - Monitor Component does not neutralize output that is…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2024-35148 |
IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection
|
6.3
Moyenne
|
25 janv. 2025 |
| CVE-2024-35144 |
IBM Maximo Application Suite 8.10, 8.11, and 9.0 - Monitor Component stores source code on the web server that could aid…
|
5.3
Moyenne
|
25 janv. 2025 |
| CVE-2024-35145 |
IBM Maximo Application Suite 9.0.0 - Monitor Component is vulnerable to cross-site scripting
|
6.1
Moyenne
|
25 janv. 2025 |
| CVE-2024-35146 |
IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting
|
5.4
Moyenne
|
6 nov. 2024 |
| CVE-2024-37068 |
IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms…
|
5.9
Moyenne
|
7 sept. 2024 |
| CVE-2024-22333 |
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally…
|
3.3
Faible
|
13 juin 2024 |
| CVE-2024-22328 |
IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system
|
7.5
Élevée
|
6 avr. 2024 |
| CVE-2023-32335 |
IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL…
|
3.7
Faible
|
13 mars 2024 |
| CVE-2023-32332 |
IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection
|
5.4
Moyenne
|
8 sept. 2023 |
| CVE-2023-32334 |
IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in…
|
3.7
Faible
|
5 juin 2023 |
| CVE-2023-27861 |
IBM Maximo Application Suite - Manage Component 8.8.0 and 8.9.0 transmits sensitive information in cleartext that…
|
5.9
Moyenne
|
5 juin 2023 |
| CVE-2022-35645 |
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to…
|
6.4
Moyenne
|
2 mars 2023 |
| CVE-2022-43923 |
IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user
|
6.2
Moyenne
|
24 févr. 2023 |