Known vulnerabilities in IBM Maximo Application Suite - page 11

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 310
Public exploits: 24
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 310 known vulnerabilities: 2 critical, 27 high, 205 medium, 75 low Critical High Medium Low

Vulnerabilities (310)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85113 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-26145		 CWE-94 High
No
No
 8.10.6, 8.11.1 09.01.2024 SB2024010910
SB2024060410
#VU84031 - Improper Certificate Validation
CVE-2023-4586		 CWE-295 Medium
No
No
 8.10.6, 8.11.1 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 8.10.8, 8.11.5 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU83234 - Incorrect Comparison
CVE-2023-45133		 CWE-697 Low
No
No
 8.10.6, 8.11.1 17.11.2023 SB2023111710
SB2023111712
SB2023113028
and 26 more
#VU82969 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-41419		 CWE-444 Medium
No
No
 8.10.6, 8.11.1 10.11.2023 SB2023111023
SB2023111029
SB2023111031
and 17 more
#VU82558 - Cross-Site Request Forgery (CSRF)
CVE-2023-45857		 CWE-352 Low
No
No
 8.10.8, 8.11.5 30.10.2023 SB2023103024
SB2023113014
SB2023121224
and 41 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 8.10.6, 8.11.1 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82350 - Resource Management Errors
CVE-2023-46158		 CWE-399 Medium
No
No
 8.10.8, 8.11.5 24.10.2023 SB2023102444
SB2023120144
SB2023122104
and 30 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 8.11.0, 8.11.2 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82226 - Inefficient Regular Expression Complexity
CVE-2022-40896		 CWE-1333 Medium
No
No
 8.10.7, 8.11.3 18.10.2023 SB20231018123
SB2023121111
SB2023122110
and 15 more
#VU82172 - Improper input validation
CVE-2023-39017		 CWE-20 High
No
No
 8.7.5, 8.8.1 17.10.2023 SB20231017115
SB2023122619
SB2024012924
and 2 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 8.10.6, 8.11.1 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80886 - Incorrect Permission Assignment for Critical Resource
CVE-2023-34042		 CWE-732 Low
No
No
 8.10.6, 8.11.1 19.09.2023 SB2023091922
SB2023112217
SB2023120414
and 6 more
#VU80089 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-41080		 CWE-601 Medium
Available
No
 8.10.6, 8.11.1 29.08.2023 SB2023082924
SB2023100565
SB2023101122
and 51 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729		 CWE-918 Medium
No
No
 8.6.8, 8.7.3 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU79665 - Improper input validation
CVE-2023-38737		 CWE-20 Medium
No
No
 8.10.6, 8.11.1 17.08.2023 SB2023081721
SB2023100203
SB2023100308
and 20 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 8.6.4 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72076 - Incorrect Authorization
CVE-2020-7692		 CWE-863 High
No
No
 8.6.7 08.02.2023 SB2020070955
SB2023020889
SB2023022307
and 9 more
#VU64471 - Improper Verification of Cryptographic Signature
CVE-2021-22573		 CWE-347 Low
No
No
 8.6.7 17.06.2022 SB2022061720
SB2022061804
SB2022062732
and 14 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 8.6.8 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more


Showing elements 201 - 220 out of 310