Known vulnerabilities in IBM Maximo Application Suite

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 310
Public exploits: 24
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 310 known vulnerabilities: 2 critical, 27 high, 205 medium, 75 low Critical High Medium Low

Vulnerabilities (310)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140036 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-16729		 CWE-74 Medium
No
No
 9.0.29, 9.1.21, 9.2.2 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140035 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-13697		 CWE-525 Medium
No
No
 9.0.29, 9.1.21, 9.2.2 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 1 more
#VU140034 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-16728		 CWE-444 Medium
No
No
 9.0.29, 9.1.21, 9.2.2 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 4 more
#VU140033 - Interpretation Conflict
CVE-2026-14643		 CWE-436 Medium
No
No
 9.0.29, 9.1.21, 9.2.2 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 1 more
#VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-15157		 CWE-93 Low
No
No
 9.0.29, 9.1.21, 9.2.2 29.07.2026 SB2026072967
SB2026090821
SB2026091015
and 5 more
#VU134755 - Use of Cache Containing Sensitive Information
CVE-2026-9678		 CWE-524 Medium
No
No
 9.0.29, 9.1.21, 9.2.2 17.06.2026 SB2026061760
SB2026082715
SB20260831117
and 7 more
#VU130907 - Exposure of sensitive information to an unauthorized actor
CVE-2026-44431		 CWE-200 Medium
No
No
 9.0.27, 9.1.19 09.05.2026 SB20260509126
SB2026051588
SB2026051589
and 43 more
#VU130906 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-44432		 CWE-409 Medium
No
No
 9.0.27, 9.1.19 09.05.2026 SB20260509126
SB2026052935
SB2026060609
and 17 more
#VU128317 - Uncontrolled Recursion
CVE-2026-33532		 CWE-674 Low
No
No
 9.0.25, 9.1.14, 9.2.1 28.04.2026 SB2026042856
SB2026072003
#VU127577 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-1527		 CWE-93 Low
No
No
 9.0.29, 9.1.21, 9.2.2 24.04.2026 SB20260424137
SB20260424148
SB20260424153
and 11 more
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 8.10.37, 8.11.34, 9.0.24, 9.1.16 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 29 more
#VU123583 - Improper Handling of Windows Device Names
CVE-2026-21860		 CWE-67 Low
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 05.03.2026 SB2026030562
SB2026030633
SB2026030937
and 6 more
#VU123124 - Improper Handling of Windows Device Names
CVE-2026-27199		 CWE-67 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 23.02.2026 SB2026022322
SB2026030633
SB2026040615
and 10 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 8.10.37, 8.11.34, 9.0.24, 9.1.16 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 8.10.37, 8.11.34, 9.0.24, 9.1.16 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU116911 - Type confusion
CVE-2025-61911		 CWE-843 High
Available
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 13.10.2025 SB2025101336
SB2025102062
SB20251022105
and 9 more
#VU116910 - Improper Encoding or Escaping of Output
CVE-2025-61912		 CWE-116 Medium
Available
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 13.10.2025 SB2025101336
SB2025102062
SB20251022105
and 9 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948		 CWE-93 Medium
No
No
 9.0.29, 9.1.21, 9.2.2 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 8 more


Showing elements 1 - 20 out of 310