Known vulnerabilities in IBM Maximo Application Suite - page 6

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 310
Public exploits: 24
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 310 known vulnerabilities: 2 critical, 27 high, 205 medium, 75 low Critical High Medium Low

Vulnerabilities (310)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98780 - Resource exhaustion
CVE-2024-28122		 CWE-400 Low
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 17.10.2024 SB2024101737
SB2024102142
SB2024121313
#VU98421 - Uncontrolled Memory Allocation
CVE-2024-37168		 CWE-789 Medium
No
No
 8.10.17, 8.11.14, 9.0.3 11.10.2024 SB2024101148
SB2024101149
SB2024101530
and 4 more
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 8.10.17, 8.11.14, 9.0.2 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 8.10.17, 8.11.14, 9.0.2 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 50 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356		 CWE-79 Medium
No
No
 8.10.17, 8.11.14, 9.0.2 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 8.10.16, 8.11.13, 9.0.1 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 8.10.16, 8.11.13, 9.0.1 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU87734 - Resource exhaustion
CVE-2024-28863		 CWE-400 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 22.03.2024 SB2024032234
SB2024052306
SB2024061114
and 30 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752		 CWE-918 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 103 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU77450 - Out-of-bounds write
CVE-2023-3138		 CWE-787 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 15.06.2023 SB2023061549
SB2023061554
SB2023061556
and 45 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 8.10.16, 8.11.14, 9.0.1 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522		 CWE-208 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU48199 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26939		 CWE-200 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 02.11.2020 SB2020110803
SB2024020522
SB2024040108
and 3 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 8.10.16, 8.11.14, 9.0.1 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more
#VU22824 - Resource exhaustion
CVE-2019-11253		 CWE-400 Medium
No
No
 8.10.16, 8.11.14, 9.0.1 18.11.2019 SB2019101712
SB2019111815
SB2020020731
and 12 more


Showing elements 101 - 120 out of 310