Known vulnerabilities in IBM Maximo Application Suite

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 302
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 302 known vulnerabilities: 2 critical, 27 high, 199 medium, 73 low Critical High Medium Low

Vulnerabilities (302)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 9.0.27, 9.1.19 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 38 more
#VU130906 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-44432		 CWE-409 Medium
No
No
 9.0.27, 9.1.19 09.05.2026 SB20260509126
SB2026052935
SB2026060609
and 14 more
#VU128317 - Uncontrolled Recursion
CVE-2026-33532		 CWE-674 Low
No
No
 9.0.25, 9.1.14, 9.2.1 28.04.2026 SB2026042856
SB2026072003
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 29 more
#VU124872 - Use of Cache Containing Sensitive Information
CVE-2026-27205		 CWE-524 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 06.04.2026 SB2026040613
SB2026040615
SB2026040617
and 14 more
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 8.10.37, 8.11.34, 9.0.24, 9.1.16 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 28 more
#VU123583 - Improper Handling of Windows Device Names
CVE-2026-21860		 CWE-67 Low
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 05.03.2026 SB2026030562
SB2026030633
SB2026030937
and 6 more
#VU123124 - Improper Handling of Windows Device Names
CVE-2026-27199		 CWE-67 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 23.02.2026 SB2026022322
SB2026030633
SB2026040615
and 10 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 8.10.37, 8.11.34, 9.0.24, 9.1.16 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 23 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 68 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 8.10.37, 8.11.34, 9.0.24, 9.1.16 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 88 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU116911 - Type confusion
CVE-2025-61911		 CWE-843 High
Available
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 13.10.2025 SB2025101336
SB2025102062
SB20251022105
and 9 more
#VU116910 - Improper Encoding or Escaping of Output
CVE-2025-61912		 CWE-116 Medium
Available
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 13.10.2025 SB2025101336
SB2025102062
SB20251022105
and 9 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 33 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more


Showing elements 1 - 20 out of 302