MA
Product
Maximo Application Suite
35
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 13Medium 19Low 2
Watch
Add Maximo Application Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2898 | 8.8 | May 6 | IBM Maximo Application Suite 9.0 could allow an attacker with some level of access to elevate their privileges due to a security configuration vulnerability in Role-Based Access… Affected: 9.0 |
| CVE-2024-35148 | 8.8 | Jan 25 | IBM Maximo Application Suite 8.10.10, 8.11.7, and 9.0 - Monitor Component is vulnerable to SQL injection Affected: 8.10.10; 8.11.7; 9.0 |
| CVE-2023-47718 | 8.8 | Jan 19 | IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: 8.10 before 8.10.6; 8.11 through 8.11.2 |
| CVE-2022-35281 | 8.8 | Jan 9 | IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and the IBM Maximo Manage 8.3, 8.4 application in IBM Maximo Application Suite are vulnerable to CSV injection Affected: 8.3; 8.4 |
| CVE-2024-27266 | 8.2 | Mar 14 | IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data Affected: 7.6.1.3 |
| CVE-2025-1500 | 8.0 | Apr 5 | IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened Affected: 9.0 before 9.0.7 |
| CVE-2026-105052 | 7.5 | Oct 12 | IBM Maximo Application Suite Information Disclosure Affected: 8.10; 8.11; 9.0; 9.1; 9.2 |
| CVE-2024-37068 | 7.5 | Sep 7 | IBM Maximo Application Suite information disclosure Affected: 8.10, 8.11, 9.0 |
| CVE-2024-22328 | 7.5 | Apr 6 | IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system Affected: 8.10; 8.11 |
| CVE-2023-32335 | 7.5 | Mar 13 | IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters Affected: 8.10; 8.11 |
| CVE-2022-41734 | 7.5 | Feb 17 | IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 8.4; 8.5 |
| CVE-2021-38924 | 7.5 | Sep 14 | IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser Affected: 8.7; 8.8 |
| CVE-2021-29854 | 7.2 | May 3 | IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers Affected: 8.7 |
Showing 13