Known vulnerabilities in IBM Maximo Application Suite - page 10

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 310
Public exploits: 24
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 310 known vulnerabilities: 2 critical, 27 high, 205 medium, 75 low Critical High Medium Low

Vulnerabilities (310)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 8.10.7, 8.11.4 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU85872 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45907		 CWE-94 High
No
No
 8.9.4, 8.10 29.01.2024 SB2022112602
SB2024012927
SB2024013005
and 6 more
#VU85848 - Resource exhaustion
CVE-2023-6481		 CWE-400 Medium
No
No
 8.10.7, 8.11.4 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378		 CWE-502 Medium
No
No
 8.10.7, 8.11.4 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU85564 - Deserialization of Untrusted Data
CVE-2023-47248		 CWE-502 High
No
No
 8.10.7, 8.11.4 18.01.2024 SB2024011810
SB2024011817
SB2024011818
and 9 more
#VU85369 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-26159		 CWE-601 Low
No
No
 8.10.7, 8.11.4 15.01.2024 SB2024011510
SB2024011517
SB2024011864
and 53 more
#VU83165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-48219		 CWE-79 Medium
No
No
 8.10.9, 8.11.6 15.11.2023 SB2023111518
SB2024012107
SB2024020635
and 1 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 8.8.4 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82548 - Inefficient Algorithmic Complexity
CVE-2023-46136		 CWE-407 Medium
No
No
 8.7.7, 8.10.8 30.10.2023 SB2023103003
SB2023103183
SB2023112907
and 73 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 8.10.8, 8.10.9, 8.11.5, 8.11.6 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81726 - Integer overflow
CVE-2023-36478		 CWE-190 Medium
No
No
 8.6.9, 8.7.4 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 8.6.9, 8.7.4 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730		 CWE-918 Medium
No
No
 8.6.8, 8.7.3 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU79878 - Incorrect Authorization
CVE-2023-3899		 CWE-863 Low
No
No
 - 23.08.2023 SB2023082308
SB2023082309
SB2023082310
and 44 more
#VU78289 - Missing release of memory after effective lifetime
CVE-2023-25399		 CWE-401 Low
No
No
 8.11.1 16.07.2023 SB2023071615
SB2023071617
SB2023071724
and 8 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 8.9.6, 8.10.4, 8.10.9, 8.11.6 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU69906 - Type conversion
CVE-2022-41911		 CWE-704 Medium
No
No
 8.9.6, 8.10.3 05.12.2022 SB2022120546
SB2024022105
SB2024030832
and 2 more
#VU69904 - Improper input validation
CVE-2022-41908		 CWE-20 Medium
No
No
 8.9.6, 8.10.3 05.12.2022 SB2022120546
SB2024022105
SB2024030832
and 2 more
#VU69891 - Memory corruption
CVE-2022-41907		 CWE-119 Medium
No
No
 8.9.6, 8.10.3 05.12.2022 SB2022120546
SB2024022105
SB2024030832
and 2 more
#VU7410 - Integer overflow
CVE-2017-7529		 CWE-190 Medium
Available
No
 8.10.8, 8.11.5 11.07.2017 SB2017071109
SB2017071214
SB2017071305
and 12 more


Showing elements 181 - 200 out of 310