Known vulnerabilities in IBM Maximo Application Suite - page 6

Vendor: IBM Corporation
Software: IBM Maximo Application Suite
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_application_suite:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 302
Public exploits: 24
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Application Suite IBM Maximo Application Suite is affected by 302 known vulnerabilities: 2 critical, 27 high, 199 medium, 73 low Critical High Medium Low

Vulnerabilities (302)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98421 - Uncontrolled Memory Allocation
CVE-2024-37168		 CWE-789 Medium
No
No
 8.10.17, 8.11.14, 9.0.3 11.10.2024 SB2024101148
SB2024101149
SB2024101530
and 4 more
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357		 CWE-79 Medium
No
No
 8.10.17, 8.11.14, 9.0.2 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU96731 - Improper Certificate Validation
CVE-2024-39689		 CWE-295 High
No
No
 8.10.17, 8.11.14, 9.0.2 03.09.2024 SB2024090358
SB2024090359
SB2024090440
and 50 more
#VU95802 - Heap-based Buffer Overflow
CVE-2024-31580		 CWE-122 Low
No
No
 8.10.10, 8.11.7 13.08.2024 SB2024081325
SB2024081330
SB2024082740
and 2 more
#VU95801 - Out-of-bounds read
CVE-2024-31584		 CWE-125 Low
No
No
 8.10.10, 8.11.7 13.08.2024 SB2024081325
SB2024082740
#VU95800 - Use After Free
CVE-2024-31583		 CWE-416 Low
No
No
 8.10.10, 8.11.7 13.08.2024 SB2024081325
SB2024081330
SB2024082740
and 2 more
#VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-5569		 CWE-835 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 26.07.2024 SB2024072688
SB2024072690
SB2024072692
and 59 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356		 CWE-79 Medium
No
No
 8.10.17, 8.11.14, 9.0.2 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more
#VU92406 - Incorrect Regular Expression
CVE-2024-4067		 CWE-185 Medium
No
No
 8.10.16, 8.11.13, 9.0.1 20.06.2024 SB20240620121
SB2024062832
SB2024070501
and 41 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 8.10.17, 8.11.14, 9.0.2 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU89149 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-34069		 CWE-94 Medium
No
No
 8.10.16, 8.11.13, 9.0.1 06.05.2024 SB2024050606
SB2024050723
SB2024050930
and 54 more
#VU88956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29881		 CWE-79 Low
No
No
 8.11.12, 9.0.0 24.04.2024 SB2024042404
SB2024042405
SB2024070924
and 1 more
#VU88955 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29203		 CWE-79 Low
No
No
 8.11.12, 9.0.0 24.04.2024 SB2024042404
SB2024042405
SB2024070923
and 2 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 8.10.14, 8.11.11, 9.0.0 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU87831 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27270		 CWE-79 Medium
No
No
 8.10.14, 8.11.11, 9.0.0 26.03.2024 SB2024032654
SB2024050220
SB2024050920
and 31 more
#VU64820 - Information Exposure Through Log Files
CVE-2020-8565		 CWE-532 Low
No
No
 8.10.16, 8.11.14, 9.0.1 30.06.2022 SB2023053114
SB2023103043
SB2024020523
and 10 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522		 CWE-208 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU48199 - Exposure of sensitive information to an unauthorized actor
CVE-2020-26939		 CWE-200 Medium
No
No
 8.10.18, 8.11.15, 9.0.3, 9.1.0 02.11.2020 SB2020110803
SB2024020522
SB2024040108
and 3 more
#VU23636 - Unprotected Storage of Credentials
CVE-2019-11250		 CWE-256 Low
No
No
 8.10.16, 8.11.14, 9.0.1 17.12.2019 SB2019082909
SB2019121707
SB2019121704
and 15 more
#VU22824 - Resource exhaustion
CVE-2019-11253		 CWE-400 Medium
No
No
 8.10.16, 8.11.14, 9.0.1 18.11.2019 SB2019101712
SB2019111815
SB2020020731
and 12 more


Showing elements 101 - 120 out of 302