Known vulnerabilities in IBM Maximo Asset Management - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94734 - Use of Web Browser Cache Containing Sensitive Information
CVE-2024-22333
CWE-525 Low
No
No
7.6.1.3.20 25.07.2024 SB2024072515
SB2024072519
#VU91984 - Permissions, Privileges, and Access Controls
CVE-2024-3933
CWE-264 Low
No
No
7.6.1.3.20 12.06.2024 SB2024061213
SB20240613101
SB20240613102
and 29 more
#VU89343 - Resource exhaustion
CVE-2023-38264
CWE-400 Medium
No
No
- 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29881
CWE-79 Low
No
No
7.6.1.3.20 24.04.2024 SB2024042404
SB2024042405
SB2024070924
and 1 more
#VU88955 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29203
CWE-79 Low
No
No
7.6.1.3.20 24.04.2024 SB2024042404
SB2024042405
SB2024070923
and 2 more
#VU88665 - Improper input validation
CVE-2024-21085
CWE-20 Low
No
No
- 17.04.2024 SB2024041764
SB2024041765
SB2024041796
and 125 more
#VU88666 - Improper input validation
CVE-2024-21011
CWE-20 Low
No
No
- 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88668 - Improper input validation
CVE-2024-21094
CWE-20 Low
No
No
- 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 126 more
#VU88173 - Resource exhaustion
CVE-2023-51775
CWE-400 Medium
No
No
- 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88120 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50313
CWE-327 Low
No
No
- 04.04.2024 SB2024040414
SB2024040415
SB2024040439
and 16 more
#VU87657 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38723
CWE-79 Low
No
No
7.6.1.3.13 20.03.2024 SB2024032034
SB2024040801
#VU87656 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32335
CWE-200 Low
No
No
7.6.1.3.17 20.03.2024 SB2024032032
SB2024032033
#VU87609 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-27266
CWE-611 High
No
No
7.6.1.3.15 19.03.2024 SB2024031916
SB2024040803
#VU86992 - Allocation of Resources Without Limits or Throttling
CVE-2024-21634
CWE-770 Medium
No
No
7.6.1.3.18 04.03.2024 SB2024030419
SB2024031125
SB2024032143
and 18 more
#VU86736 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23635
CWE-79 Low
No
No
7.6.1.3.19 22.02.2024 SB2024022233
SB2024041739
SB2024041754
and 6 more
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
7.6.1.3.22 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
7.6.1.3.22 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU85465 - Improper input validation
CVE-2023-43643
CWE-20 Medium
No
No
7.6.1.3.17 16.01.2024 SB2024011682
SB2024031417
SB2024031420
#VU83165 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-48219
CWE-79 Medium
No
No
7.6.1.3.17 15.11.2023 SB2023111518
SB2024012107
SB2024020635
and 1 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
7.6.1.3.16 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more


Showing elements 41 - 60 out of 159