Known vulnerabilities in IBM Maximo Asset Management - page 4

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85885 - Improper Access Control
CVE-2023-32333
CWE-284 Medium
No
No
7.6.1.3.12 30.01.2024 SB2024013006
#VU85877 - Cross-Site Request Forgery (CSRF)
CVE-2023-47718
CWE-352 Medium
No
No
7.6.1.3.13 29.01.2024 SB2024012936
SB2024012937
#VU85848 - Resource exhaustion
CVE-2023-6481
CWE-400 Medium
No
No
7.6.1.3.16 29.01.2024 SB2024012902
SB2024020727
SB2024020840
and 23 more
#VU85618 - Deserialization of Untrusted Data
CVE-2023-6378
CWE-502 Medium
No
No
7.6.1.3.16 19.01.2024 SB2024011926
SB2024011927
SB2024012316
and 39 more
#VU85468 - Improper input validation
CVE-2024-20918
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85470 - Improper input validation
CVE-2024-20919
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85471 - Improper input validation
CVE-2024-20921
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85472 - Improper input validation
CVE-2024-20926
CWE-20 Medium
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 164 more
#VU85473 - Improper input validation
CVE-2024-20945
CWE-20 Low
No
No
- 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU82583 - Observable discrepancy
CVE-2023-33850
CWE-203 Medium
No
No
- 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642
CWE-770 Medium
No
No
7.6.1.3.16 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82239 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45818
CWE-79 Low
No
No
7.6.1.2.40, 7.6.1.3.15 19.10.2023 SB2023101936
SB2024021610
#VU82238 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-45819
CWE-79 Low
No
No
7.6.1.2.40, 7.6.1.3.15 19.10.2023 SB2023101936
SB2024021610
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
7.6.1.3.15 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
7.6.1.3.15 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194
CWE-502 Low
Available
No
7.6.1.3.15 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915
CWE-113 Medium
No
No
7.6.1.3.16 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881
CWE-835 Medium
No
No
7.6.1.3.16 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550
CWE-94 Medium
No
No
7.6.1.3.16 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more


Showing elements 61 - 80 out of 159