Known vulnerabilities in IBM Maximo Application Suite - page 15

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 310
Public exploits: 24
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 310 known vulnerabilities: 2 critical, 27 high, 205 medium, 75 low Critical High Medium Low

Vulnerabilities (310)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35645		 CWE-79 Low
No
No
 8.4.4, 8.5.2 06.03.2023 SB2023030660
SB2023030706
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 8.8.7, 8.9.3 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 8.8.6, 8.9.2 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71377 - Improper input validation
CVE-2022-40898		 CWE-20 Medium
No
No
 8.8.6, 8.9.2 20.01.2023 SB2023012007
SB2023012013
SB2023012014
and 22 more
#VU71185 - Improper input validation
CVE-2022-23529		 CWE-20 High
Available
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020132
and 12 more
#VU71182 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23540		 CWE-327 High
Available
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 15 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541		 CWE-327 High
No
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU71180 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23539		 CWE-327 Medium
No
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU70109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23494		 CWE-79 Low
No
No
 8.8.7, 8.9.2 12.12.2022 SB2022121205
SB2023032042
SB2023032914
and 3 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.8.6, 8.9.2 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.8.6, 8.9.2 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67948 - Resource exhaustion
CVE-2022-37734		 CWE-400 Medium
No
No
 8.8.5 05.10.2022 SB2022100553
SB2022100555
SB2022100650
and 19 more
#VU67586 - Server-Side Request Forgery (SSRF)
CVE-2022-38648		 CWE-918 Medium
No
No
 8.8.7 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146		 CWE-918 Medium
Available
No
 8.8.7 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU67584 - Server-Side Request Forgery (SSRF)
CVE-2022-38398		 CWE-918 Medium
No
No
 8.8.7 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67186 - Improper input validation
CVE-2022-36087		 CWE-20 Medium
No
No
 8.8.6, 8.9.2 12.09.2022 SB2022091220
SB2022092239
SB2022120113
and 17 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 8.8.5 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU66181 - Session Fixation
CVE-2022-25896		 CWE-384 Medium
No
No
 8.8.6, 8.9.2 08.08.2022 SB2022080818
SB2022080819
SB2022110270
and 7 more
#VU59728 - Improper input validation
CVE-2022-21271		 CWE-20 Medium
No
No
 8.8.2 18.01.2022 SB2022011840
SB2022011841
SB2022020147
and 18 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 8.6.3, 8.7.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 339 more


Showing elements 281 - 300 out of 310