Known vulnerabilities in IBM Maximo Application Suite - page 5
Vendor:
IBM Corporation
Software:
IBM Maximo Application Suite
Software CPE:
cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
302
Public exploits:
24
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.2
9.2.1
9.1.18
9.1.17
9.0.26
9.0.25
9.1.19
9.0.27
9.1.15
9.1.14
9.1.13
9.1.12
9.0.23
9.1.16
9.0.24
8.11.34
8.10.37
9.1.10
9.1.9
9.0.21
9.0.20
8.11.32
8.11.31
8.10.34
8.10.35
8.10.36
8.11.33
9.0.22
9.1.11
8.10.33
8.11.30
9.0.19
9.1.8
8.10.32
8.11.29
9.0.18
9.1.7
9.1.6
9.0.17
8.11.28
8.10.31
9.1.4
8.10.30
8.11.27
9.0.16
9.1.5
9.1.2
9.0.9
9.0.14
8.11.20
8.11.25
8.10.28
8.10.23
8.10.29
8.11.26
9.0.15
9.1.3
8.10.27
8.11.24
9.0.13
9.1.1
8.10.26
8.11.23
9.0.12
8.10.25
8.11.22
9.0.11
8.10.24
8.11.21
9.0.10
8.10.21
8.11.18
9.0.7
8.10.22
8.11.19
9.0.8
8.10.20
8.11.17
9.0.6
9.0.5
8.10.19
8.11.16
9.0.4
9.1.0
8.10.18
8.11.15
9.0.3
8.10.17
8.11.14
9.0.2
8.10.16
8.10.15
8.11.13
8.11.12
9.0.1
8.10.12
8.11.10
8.11.11
8.10.14
8.7.11
9.0.0
8.7.10
8.11.8
8.10.11
7.6.1.3
8.11.7
8.10.10
8.11.4
8.10
8.11.6
8.10.9
8.6.9
8.7.7
8.6.7
8.6.8
8.11.5
8.10.8
8.9.11
8.11.3
8.10.7
8.11.2
8.11.1
8.11.0
8.10.6
8.9.10
8.10.5
8.9.8
8.9.9
8.10.2
8.9.7
8.10.4
8.8.10
8.8.9
8.9.5
8.10.1
8.9.4
8.8.8
8.10.3
8.9.6
8.6.5
8.9.0
8.9.1
8.10.0
8.8.5
8.9.3
8.8.7
8.4.7
8.9.2
8.8.6
8.4.4
8.5
8.4.6
8.4.5
8.8.4
8.8.3
8.7.6
8.4.3
8.3.6
8.8.2
8.7.5
8.3.5
8.8.1
8.7.4
8.3.4
8.3.3
8.7.3
8.2.3
8.6.4
8.3.2
8.7.2
8.7.1
8.6.3
8.6.2
8.6.1
8.5.2
8.5.1
8.4.2
8.4.1
8.3.1
8.2.2
8.2.1
8.1.1
Vulnerabilities (302)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU98780 - Resource exhaustion CVE-2024-28122 |
CWE-400 | Low | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 17.10.2024 |
SB2024101737 SB2024102142 SB2024121313 |
||
| #VU98131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-43800 |
CWE-79 | Medium | 8.10.19, 8.11.16, 9.0.4 | 08.10.2024 |
SB2024100821 SB2024100824 SB2024100825 and 48 more |
||
| #VU97768 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-43799 |
CWE-79 | Low | 8.10.19, 8.11.16, 9.0.4 | 30.09.2024 |
SB2024093022 SB2024100824 SB2024100825 and 50 more |
||
| #VU97574 - Uncontrolled Recursion CVE-2024-7254 |
CWE-674 | Medium | 8.10.19, 8.11.16, 9.0.4 | 19.09.2024 |
SB2024091904 SB2024100103 SB2024101050 and 90 more |
||
| #VU97478 - Inefficient Regular Expression Complexity CVE-2024-41818 |
CWE-1333 | Medium | 8.10.18, 8.11.15, 9.0.3 | 18.09.2024 |
SB2024091833 SB2024091834 SB2024092612 and 12 more |
||
| #VU97208 - Asymmetric Resource Consumption (Amplification) CVE-2024-45590 |
CWE-405 | Medium | 8.10.19, 8.11.16, 9.0.4 | 12.09.2024 |
SB2024091249 SB2024091251 SB2024091252 and 59 more |
||
| #VU96744 - Type confusion CVE-2024-6119 |
CWE-843 | Medium | 8.10.19, 8.11.16, 9.0.4 | 03.09.2024 |
SB2024090364 SB2024090365 SB2024090384 and 99 more |
||
| #VU96058 - Exposure of sensitive information to an unauthorized actor CVE-2023-50314 |
CWE-200 | Low | 8.10.18, 8.11.15, 9.0.3 | 15.08.2024 |
SB2024081566 SB2024091324 SB2024091814 and 44 more |
||
| #VU96050 - Server-Side Request Forgery (SSRF) CVE-2024-39338 |
CWE-918 | Medium | 8.10.18, 8.11.15, 9.0.3 | 15.08.2024 |
SB2024081543 SB2024090326 SB2024090446 and 63 more |
||
| #VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30172 |
CWE-835 | Medium | 8.10.19, 8.11.16, 9.0.4 | 07.05.2024 |
SB2024050731 SB2024061019 SB20240611170 and 62 more |
||
| #VU89219 - Observable discrepancy CVE-2024-30171 |
CWE-203 | Medium | 8.10.19, 8.11.16, 9.0.4 | 07.05.2024 |
SB2024050731 SB2024050734 SB2024061019 and 59 more |
||
| #VU89218 - Resource exhaustion CVE-2024-29857 |
CWE-400 | Medium | 8.10.19, 8.11.16, 9.0.4 | 07.05.2024 |
SB2024050731 SB2024061019 SB20240611170 and 69 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 112 more |
||
| #VU87734 - Resource exhaustion CVE-2024-28863 |
CWE-400 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 22.03.2024 |
SB2024032234 SB2024052306 SB2024061114 and 30 more |
||
| #VU87567 - Server-Side Request Forgery (SSRF) CVE-2024-28752 |
CWE-918 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 15.03.2024 |
SB2024031529 SB2024042254 SB2024052706 and 20 more |
||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 138 more |
||
| #VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-25710 |
CWE-835 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 20.02.2024 |
SB2024022033 SB2024022937 SB2024031520 and 102 more |
||
| #VU86049 - Insufficient Verification of Data Authenticity CVE-2024-24557 |
CWE-345 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 02.02.2024 |
SB2024020242 SB2024032237 SB2024032712 and 18 more |
||
| #VU85874 - Resource exhaustion CVE-2023-33202 |
CWE-400 | Medium | 8.10.19, 8.11.16, 9.0.4 | 29.01.2024 |
SB2024012929 SB2024012930 SB2024013106 and 19 more |
||
| #VU77450 - Out-of-bounds write CVE-2023-3138 |
CWE-787 | Medium | 8.10.18, 8.11.15, 9.0.3, 9.1.0 | 15.06.2023 |
SB2023061549 SB2023061554 SB2023061556 and 45 more |
Showing elements 81 - 100 out of 302