Known vulnerabilities in IBM Maximo Application Suite - page 2

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 310
Public exploits: 24
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 310 known vulnerabilities: 2 critical, 27 high, 205 medium, 75 low Critical High Medium Low

Vulnerabilities (310)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124874 - Insufficient Verification of Data Authenticity
CVE-2026-26007		 CWE-345 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 06.04.2026 SB2026040616
SB2026040617
SB2026040618
and 31 more
#VU124872 - Use of Cache Containing Sensitive Information
CVE-2026-27205		 CWE-524 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 06.04.2026 SB2026040613
SB2026040615
SB2026040617
and 14 more
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU122452 - Improper Check for Unusual or Exceptional Conditions
CVE-2026-25639		 CWE-754 Medium
Available
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 09.02.2026 SB2026020914
SB2026022201
SB2026022202
and 25 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 71 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 90 more
#VU117177 - Missing initialization of resource
CVE-2025-54410		 CWE-909 Low
No
No
 8.10.32, 8.11.29, 9.0.18, 9.1.7 15.10.2025 SB2025101533
SB2025101534
SB2025112459
and 6 more
#VU115761 - XML Injection
CVE-2025-9375		 CWE-91 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 18.09.2025 SB2025091824
SB2025091832
SB2025092653
and 3 more
#VU115571 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36000		 CWE-79 Low
No
No
 8.10.31, 8.11.28, 9.0.17, 9.1.6 16.09.2025 SB20250916311
SB20250916316
SB2025092515
and 25 more
#VU115217 - Incorrect Authorization
CVE-2025-5187		 CWE-863 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 15.09.2025 SB2025091545
SB2025091548
SB2025091549
and 15 more
#VU115001 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58068		 CWE-444 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 09.09.2025 SB2025090918
SB2025090920
SB2025090921
and 13 more
#VU114006 - Privilege Chaining
CVE-2025-36124		 CWE-268 High
No
No
 8.10.31, 8.11.28, 9.0.17, 9.1.6 13.08.2025 SB2025081354
SB2025082918
SB2025082921
and 23 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU112890 - Inefficient Regular Expression Complexity
CVE-2025-5889		 CWE-1333 Low
No
No
 8.10.36, 8.11.33, 9.0.22, 9.1.11 15.07.2025 SB2025071511
SB2025071512
SB2025071513
and 34 more
#VU111971 - Improper Authorization
CVE-2025-4563		 CWE-285 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 26.06.2025 SB2025062632
SB2025062645
SB2025062646
and 7 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874		 CWE-693 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 18 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 8.10.33, 8.11.30, 9.0.19, 9.1.8 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 8.10.30, 8.11.27, 9.0.16, 9.1.5 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU103159 - Improper input validation
CVE-2025-21502		 CWE-20 Medium
No
No
 8.10.32, 8.11.29, 9.0.18, 9.1.7 21.01.2025 SB2025012221
SB2025012222
SB2025012223
and 44 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 8.10.31, 8.11.28, 9.0.17, 9.1.6 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more


Showing elements 21 - 40 out of 310