Known vulnerabilities in IBM Maximo Asset Management - page 5

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28367
CWE-79 Medium
No
No
7.6.1.2.29, 7.6.1.3.4 24.11.2023 SB2023112430
SB2023112431
#VU83267 - Improper input validation
CVE-2023-5676
CWE-20 Low
No
No
- 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82140 - Improper input validation
CVE-2023-22067
CWE-20 Medium
No
No
- 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081
CWE-20 Medium
No
No
- 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU80019 - Server-Side Request Forgery (SSRF)
CVE-2022-44730
CWE-918 Medium
No
No
7.6.1.2.40, 7.6.1.3.15 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 15 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729
CWE-918 Medium
No
No
7.6.1.2.40, 7.6.1.3.15 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
7.6.1.2.36, 7.6.1.3.11 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77362 - Resource exhaustion
CVE-2023-34455
CWE-400 Medium
No
No
7.6.1.2.36, 7.6.1.3.11 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454
CWE-190 Medium
No
No
7.6.1.2.36, 7.6.1.3.11 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453
CWE-190 Medium
No
No
7.6.1.2.36, 7.6.1.3.11 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
7.6.1.3.11 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
7.6.1.3.11 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU72076 - Incorrect Authorization
CVE-2020-7692
CWE-863 High
No
No
7.6.1.2.39, 7.6.1.3.13 08.02.2023 SB2020070955
SB2023020889
SB2023022307
and 9 more
#VU65469 - Improper input validation
CVE-2022-29577
CWE-20 Medium
No
No
7.6.1.2.29, 7.6.1.3.4 19.07.2022 SB2022071969
SB2022072038
SB20221018125
and 10 more
#VU64471 - Improper Verification of Cryptographic Signature
CVE-2021-22573
CWE-347 Low
No
No
7.6.1.2.39, 7.6.1.3.13 17.06.2022 SB2022061720
SB2022061804
SB2022062732
and 14 more
#VU49517 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2021-23926
CWE-776 High
No
No
7.6.1.2.40, 7.6.1.3.10 14.01.2021 SB2021011401
SB2022072039
SB2022081823
and 21 more
#VU28228 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7656
CWE-79 Medium
No
No
7.6.1.2.37 25.05.2020 SB2020052520
SB2020100907
SB2022072056
and 14 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023
CWE-79 Low
Available
Exploited
7.6.1.2.37 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
7.6.1.2.37 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251
CWE-79 Low
No
No
7.6.1.2.37 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more


Showing elements 81 - 100 out of 159