Ibm

Maximo Application Suite

32 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-35146

  • EPSS 0.59%
  • Veröffentlicht 06.11.2024 15:15:19
  • Zuletzt bearbeitet 08.07.2025 20:29:54

IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended funct...

5.9

CVE-2024-38314

  • EPSS 0.11%
  • Veröffentlicht 24.10.2024 18:15:07
  • Zuletzt bearbeitet 08.07.2025 19:55:10

IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-coded cryptographic key to an attacker that has compromised environment.

7.5

CVE-2024-37068

  • EPSS 0.07%
  • Veröffentlicht 07.09.2024 14:15:02
  • Zuletzt bearbeitet 21.09.2024 10:15:05

IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information using man in the middle techniques.

3.3

CVE-2024-22333

  • EPSS 0.05%
  • Veröffentlicht 13.06.2024 14:15:11
  • Zuletzt bearbeitet 21.11.2024 08:56:04

IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.

7.5

CVE-2024-22328

  • EPSS 0.05%
  • Veröffentlicht 06.04.2024 12:15:08
  • Zuletzt bearbeitet 14.01.2025 20:56:44

IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X...

8.2

CVE-2024-27266

  • EPSS 0.03%
  • Veröffentlicht 14.03.2024 19:15:50
  • Zuletzt bearbeitet 21.11.2024 09:04:12

IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force...

6.4

CVE-2023-38723

  • EPSS 0.07%
  • Veröffentlicht 13.03.2024 10:15:07
  • Zuletzt bearbeitet 14.01.2025 20:00:25

IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

7.5

CVE-2023-32335

  • EPSS 0.08%
  • Veröffentlicht 13.03.2024 10:15:07
  • Zuletzt bearbeitet 14.01.2025 20:10:32

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header o...

8.8

CVE-2023-47718

  • EPSS 0.04%
  • Veröffentlicht 19.01.2024 02:15:07
  • Zuletzt bearbeitet 21.11.2024 08:30:44

IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X...

5.4

CVE-2023-32337

  • EPSS 0.04%
  • Veröffentlicht 19.01.2024 02:15:07
  • Zuletzt bearbeitet 21.11.2024 08:03:08

IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other att...