Known vulnerabilities in IBM Maximo Application Suite - page 10

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 302
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 302 known vulnerabilities: 2 critical, 27 high, 199 medium, 73 low Critical High Medium Low

Vulnerabilities (302)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 8.10.7, 8.11.4 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU85872 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45907		 CWE-94 High
No
No
 8.9.4, 8.10 29.01.2024 SB2022112602
SB2024012927
SB2024013005
and 6 more
#VU85113 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-26145		 CWE-94 High
No
No
 8.10.6, 8.11.1 09.01.2024 SB2024010910
SB2024060410
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 8.10.8, 8.11.5 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU83165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-48219		 CWE-79 Medium
No
No
 8.10.9, 8.11.6 15.11.2023 SB2023111518
SB2024012107
SB2024020635
and 1 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 8.8.4 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 8.10.8, 8.11.5 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 8.7.7, 8.10.8 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU82350 - Resource Management Errors
CVE-2023-46158		 CWE-399 Medium
No
No
 8.10.8, 8.11.5 24.10.2023 SB2023102444
SB2023120144
SB2023122104
and 30 more
#VU82172 - Improper input validation
CVE-2023-39017		 CWE-20 High
No
No
 8.7.5, 8.8.1 17.10.2023 SB20231017115
SB2023122619
SB2024012924
and 2 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 8.10.8, 8.10.9, 8.11.5, 8.11.6 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 8.6.9, 8.7.4 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 8.6.9, 8.7.4 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730		 CWE-918 Medium
No
No
 8.6.8, 8.7.3 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729		 CWE-918 Medium
No
No
 8.6.8, 8.7.3 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU78289 - Missing release of memory after effective lifetime
CVE-2023-25399		 CWE-401 Low
No
No
 8.11.1 16.07.2023 SB2023071615
SB2023071617
SB2023071724
and 8 more
#VU72076 - Incorrect Authorization
CVE-2020-7692		 CWE-863 High
No
No
 8.6.7 08.02.2023 SB2020070955
SB2023020889
SB2023022307
and 9 more
#VU64471 - Improper Verification of Cryptographic Signature
CVE-2021-22573		 CWE-347 Low
No
No
 8.6.7 17.06.2022 SB2022061720
SB2022061804
SB2022062732
and 14 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 8.6.8 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more
#VU7410 - Integer overflow
CVE-2017-7529		 CWE-190 Medium
Available
No
 8.10.8, 8.11.5 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more


Showing elements 181 - 200 out of 302