Known vulnerabilities in IBM Maximo Application Suite - page 15

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 302
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 302 known vulnerabilities: 2 critical, 27 high, 199 medium, 73 low Critical High Medium Low

Vulnerabilities (302)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35645		 CWE-79 Low
No
No
 8.4.4, 8.5.2 06.03.2023 SB2023030660
SB2023030706
#VU72146 - Improper input validation
CVE-2012-5784		 CWE-20 Medium
No
No
 8.4.5 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU71379 - Incorrect Regular Expression
CVE-2022-40897		 CWE-185 Medium
No
No
 8.8.6, 8.9.2 20.01.2023 SB2023012008
SB2023012015
SB2023012016
and 99 more
#VU71185 - Improper input validation
CVE-2022-23529		 CWE-20 High
Available
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020132
and 12 more
#VU71182 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23540		 CWE-327 High
Available
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 15 more
#VU71181 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23541		 CWE-327 High
No
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU71180 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-23539		 CWE-327 Medium
No
No
 8.8.7, 8.9.3 16.01.2023 SB2023011632
SB2023011633
SB2023020322
and 16 more
#VU70109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23494		 CWE-79 Low
No
No
 8.8.7, 8.9.2 12.12.2022 SB2022121205
SB2023032042
SB2023032914
and 3 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.8.6, 8.9.2 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.8.6, 8.9.2 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67586 - Server-Side Request Forgery (SSRF)
CVE-2022-38648		 CWE-918 Medium
No
No
 8.8.7 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67584 - Server-Side Request Forgery (SSRF)
CVE-2022-38398		 CWE-918 Medium
No
No
 8.8.7 22.09.2022 SB2022092232
SB2023030742
SB2023040503
and 14 more
#VU67576 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-40705		 CWE-611 High
No
No
 8.4.5 22.09.2022 SB2022092217
SB2023030205
SB2023030206
and 1 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 - 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 8.8.5 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 8.4.3 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65831 - Improper input validation
CVE-2022-2047		 CWE-20 Low
No
No
 8.4.6, 8.5 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 8.4.5 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU14296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8032		 CWE-79 Low
No
No
 8.4.5 08.08.2018 SB2018080909
SB2018101810
SB2023021403
and 5 more
#VU41375 - Improper input validation
CVE-2014-3596		 CWE-20 Medium
No
No
 8.4.5 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more


Showing elements 281 - 300 out of 302