5.3

CVE-2026-18531

EPSS 0.38%
Veröffentlicht 05.08.2026 16:16:54
Zuletzt bearbeitet 10.08.2026 16:10:16
Erkennungen
Login

IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret

IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Maximo Application Suite Version >= 9.0 < 9.0.28

Ibm ≫ Maximo Application Suite Version >= 9.1 < 9.1.20

Ibm ≫ Maximo Application Suite Version 9.2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.305

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

https://www.ibm.com/support/pages/node/7282362

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-18531

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-18531

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-18531

EUVD