Known vulnerabilities in IBM Maximo Asset Management

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635
CWE-79 Medium
No
No
- 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU116602 - Allocation of Resources Without Limits or Throttling
CVE-2025-36099
CWE-770 Low
No
No
- 06.10.2025 SB2025100614
SB2025100616
SB2025100618
and 14 more
#VU114346 - Command injection
CVE-2025-7962
CWE-77 Medium
No
No
- 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114097 - Improper Certificate Validation
CVE-2025-33142
CWE-295 Medium
No
No
- 15.08.2025 SB2025081504
SB2025081894
SB2025081911
and 14 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924
CWE-674 Medium
No
No
7.6.1.3.36 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU113085 - Interpretation Conflict
CVE-2024-56339
CWE-436 Medium
No
No
- 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097
CWE-121 High
No
No
- 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU112255 - Deserialization of Untrusted Data
CVE-2025-27818
CWE-502 Medium
No
No
7.6.1.3.35 04.07.2025 SB20250704102
SB2025070708
SB2025080519
and 16 more
#VU112146 - Server-Side Request Forgery (SSRF)
CVE-2025-27817
CWE-918 High
Available
No
7.6.1.3.35 03.07.2025 SB2025070339
SB2025070340
SB2025070345
and 42 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038
CWE-502 Critical
No
No
- 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
- 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104
CWE-79 Low
No
No
- 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107925 - Unrestricted Upload of File with Dangerous Type
CVE-2024-45077
CWE-434 Medium
No
No
7.6.1.3.25 24.04.2025 SB2025042470
#VU107876 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45088
CWE-79 Low
No
No
7.6.1.3.25 23.04.2025 SB2025042331
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907
CWE-918 Medium
No
No
- 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU107631 - Server-Side Request Forgery (SSRF)
CVE-2025-2987
CWE-918 Low
No
No
7.6.1.3.30 22.04.2025 SB2025042215
#VU98644 - Improper input validation
CVE-2024-21235
CWE-20 Medium
No
No
- 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210
CWE-20 Low
No
No
- 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208
CWE-20 Low
No
No
- 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217
CWE-20 Low
No
No
- 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more


Showing elements 1 - 20 out of 159