Known vulnerabilities in IBM Maximo Asset Management - page 6

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82324 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-17480
CWE-79 Low
No
No
7.6.1.2.30, 7.6.1.3.5 24.10.2023 SB2023102423
SB2023102473
#VU82033 - Information Exposure Through an Error Message
CVE-2021-38924
CWE-209 Medium
No
No
7.6.1.1.22, 7.6.1.2.0.23, 7.6.1.3.0.3 16.10.2023 SB2023101618
#VU82020 - Cleartext Storage of Sensitive Information
CVE-2022-41734
CWE-312 Medium
No
No
7.6.1.2.0.28, 7.6.1.3.0.3 16.10.2023 SB2023101605
#VU80741 - Improper Certificate Validation
CVE-2012-5783
CWE-295 Medium
No
No
7.6.1.2.36, 7.6.1.3.11 13.09.2023 SB2023091335
SB2023091521
SB2023092013
and 20 more
#VU80530 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32332
CWE-79 Low
No
No
7.6.1.2.35, 7.6.1.3.11 07.09.2023 SB2023090740
SB2023090823
#VU79519 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-32697
CWE-94 High
No
No
7.6.1.2.36, 7.6.1.3.11 15.08.2023 SB2023090805
SB2023090807
SB2023091411
and 7 more
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609
CWE-502 High
No
No
- 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU78413 - Improper input validation
CVE-2023-22045
CWE-20 Low
No
No
- 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049
CWE-20 Low
No
No
- 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU76753 - Allocation of Resources Without Limits or Throttling
CVE-2023-28867
CWE-770 Medium
No
No
7.6.1.3.8 01.06.2023 SB2023060123
SB2023062739
SB2023063014
and 17 more
#VU76062 - Incorrect Regular Expression
CVE-2022-21681
CWE-185 Medium
No
No
7.6.1.2.0.29, 7.6.1.3.4 12.05.2023 SB2023051212
SB2022030934
SB2023061619
and 13 more
#VU76061 - Incorrect Regular Expression
CVE-2022-21680
CWE-185 Medium
No
No
7.6.1.2.0.29, 7.6.1.3.4 12.05.2023 SB2023051212
SB2022030930
SB2023061619
and 11 more
#VU73175 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-31159
CWE-22 Medium
No
No
7.6.1.2.33, 7.6.1.3.7 08.03.2023 SB2023030823
SB2023030915
SB2023042635
and 15 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533
CWE-345 Low
No
No
7.6.1.2.33, 7.6.1.3.8 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70109 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23494
CWE-79 Low
No
No
7.6.1.2.30, 7.6.1.3.5 12.12.2022 SB2022121205
SB2023032042
SB2023032914
and 3 more
#VU67489 - Resource exhaustion
CVE-2022-34917
CWE-400 Medium
No
No
7.6.1.3.11 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033
CWE-79 Low
No
No
7.6.1.2.33, 7.6.1.3.8 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823
CWE-378 Low
No
No
7.6.1.2.36 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU35706 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1010091
CWE-79 Medium
No
No
7.6.1.2.30, 7.6.1.3.5 17.07.2019 SB2019071734
SB2023102423
#VU18263 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-6708
CWE-79 Medium
Available
No
7.6.1.2.37 15.04.2019 SB2012072101
SB2019100301
SB2020033103
and 15 more


Showing elements 101 - 120 out of 159