Known vulnerabilities in IBM Maximo Asset Management - page 2

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101344 - Integer overflow
CVE-2024-10917
CWE-190 Low
No
No
- 09.12.2024 SB2024120927
SB2024120928
SB2024120929
and 66 more
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087
CWE-79 Medium
No
No
- 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086
CWE-611 Medium
No
No
- 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU99280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45071
CWE-79 Low
No
No
- 23.10.2024 SB2024102327
SB2024102343
SB2024102353
and 11 more
#VU98810 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45072
CWE-611 Medium
No
No
- 18.10.2024 SB2024101807
SB2024101813
SB20241022399
and 11 more
#VU98730 - Improper input validation
CVE-2024-45085
CWE-20 Medium
No
No
- 16.10.2024 SB2024101654
SB2024101816
SB2024101820
and 8 more
#VU98137 - Allocation of Resources Without Limits or Throttling
CVE-2024-40094
CWE-770 Medium
Available
No
7.6.1.3.25 08.10.2024 SB2024100835
SB2024100936
SB2024101593
and 27 more
#VU98136 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45073
CWE-79 Low
No
No
- 08.10.2024 SB2024100833
SB2024100834
SB2024100942
and 12 more
#VU97241 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38357
CWE-79 Medium
No
No
7.6.1.3.22 13.09.2024 SB2024091335
SB2024091336
SB2024092013
and 4 more
#VU96059 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50315
CWE-200 Low
No
No
- 15.08.2024 SB2024081567
SB2024082831
SB2024082846
and 9 more
#VU95625 - Improper input validation
CVE-2024-35154
CWE-20 Low
No
No
- 09.08.2024 SB2024080941
SB2024081324
SB2024081439
and 11 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532
CWE-451 Medium
No
No
- 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35153
CWE-79 Medium
No
No
- 26.06.2024 SB2024062690
SB2024062708
SB2024062717
and 12 more
#VU92821 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38356
CWE-79 Medium
No
No
7.6.1.3.22 20.06.2024 SB20240620149
SB2024090468
SB2024091336
and 4 more
#VU88977 - Resource exhaustion
CVE-2024-25026
CWE-400 Medium
No
No
7.6.1.3.23 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329
CWE-918 Medium
No
No
- 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354
CWE-611 High
No
No
- 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU86374 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-46308
CWE-1321 High
No
No
7.6.1.3.25 13.02.2024 SB2024021316
SB2024021609
SB2024031413
and 1 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998
CWE-770 Medium
Available
No
8.1.10, 9.0.6 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU72033 - Incorrect Regular Expression
CVE-2023-22467
CWE-185 Medium
No
No
8.1.10, 9.0.6 07.02.2023 SB2023020783
SB2023020793
SB2023020834
and 9 more


Showing elements 21 - 40 out of 159