Known vulnerabilities in IBM Maximo Application Suite - page 2

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 302
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 302 known vulnerabilities: 2 critical, 27 high, 199 medium, 73 low Critical High Medium Low

Vulnerabilities (302)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117177 - Missing initialization of resource
CVE-2025-54410		 CWE-909 Low
No
No
 8.10.32, 8.11.29, 9.0.18, 9.1.7 15.10.2025 SB2025101533
SB2025101534
SB2025112459
and 6 more
#VU115761 - XML Injection
CVE-2025-9375		 CWE-91 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 18.09.2025 SB2025091824
SB2025091832
SB2025092653
and 3 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000		 CWE-79 Low
No
No
 8.10.31, 8.11.28, 9.0.17, 9.1.6 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU115568 - Allocation of Resources Without Limits or Throttling
CVE-2025-36047		 CWE-770 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 16.09.2025 SB20250916312
SB20250916316
SB20250916321
and 29 more
#VU115217 - Incorrect Authorization
CVE-2025-5187		 CWE-863 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 15.09.2025 SB2025091545
SB2025091548
SB2025091549
and 15 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU115001 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58068		 CWE-444 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 09.09.2025 SB2025090918
SB2025090920
SB2025090921
and 13 more
#VU114006 - Privilege Chaining
CVE-2025-36124		 CWE-268 High
No
No
 8.10.31, 8.11.28, 9.0.17, 9.1.6 13.08.2025 SB2025081354
SB2025082918
SB2025082921
and 23 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU111980 - Protection Mechanism Failure
CVE-2025-50182		 CWE-693 Low
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 26.06.2025 SB2025062659
SB2025062660
SB2025062662
and 21 more
#VU111971 - Improper Authorization
CVE-2025-4563		 CWE-285 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 26.06.2025 SB2025062632
SB2025062645
SB2025062646
and 7 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874		 CWE-693 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 16 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 8.10.32, 8.11.29, 9.0.18, 9.1.7 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744		 CWE-1059 Low
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068		 CWE-789 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 8.10.31, 8.11.28, 9.0.17, 9.1.6 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more


Showing elements 21 - 40 out of 302