Known vulnerabilities in IBM Maximo Asset Management - page 8

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106047 - Improper Neutralization of Formula Elements in a CSV File
CVE-2022-35281
CWE-1236 High
No
No
7.6.1.1.23, 7.6.1.2.28, 7.6.1.3.3 26.03.2025 SB2022110610
#VU81081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20374
CWE-79 Medium
No
No
7.6.1.1.14, 7.6.1.2.8, 7.6.1.3.3 25.09.2023 SB2021122247
#VU72888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35645
CWE-79 Low
No
No
7.6.1.1.0.23, 7.6.1.2.0.30, 7.6.1.3.0.3 06.03.2023 SB2023030660
SB2023030706
#VU72146 - Improper input validation
CVE-2012-5784
CWE-20 Medium
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU71715 - Deserialization of Untrusted Data
CVE-2023-23477
CWE-502 Critical
No
No
- 31.01.2023 SB2023013137
SB2023020111
SB2023020114
and 9 more
#VU67577 - Improper Authentication
CVE-2022-40616
CWE-287 Medium
No
No
- 22.09.2022 SB2022092218
#VU67576 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-40705
CWE-611 High
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 22.09.2022 SB2022092217
SB2023030205
SB2023030206
and 1 more
#VU66859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35714
CWE-79 Low
No
No
7.6.1.1.21, 7.6.1.2.13 30.08.2022 SB2022083029
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160
CWE-79 Low
No
No
7.6.1.2.0.30, 7.6.1.3.0.5 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
7.6.1.3.0.4 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU62600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22436
CWE-79 Low
No
No
- 26.04.2022 SB2022042618
#VU62599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22435
CWE-79 Low
No
No
- 26.04.2022 SB2022042618
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813
CWE-611 Medium
No
No
- 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU60729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23647
CWE-79 Low
No
No
7.6.1.2.0.30 21.02.2022 SB2022022105
SB2022100650
SB2022111738
and 1 more
#VU24468 - Improper input validation
CVE-2019-0227
CWE-20 Medium
Available
No
7.6.1.2.0.29, 7.6.1.3.0.4 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331
CWE-79 Low
No
No
7.6.1.2.0.31 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU14296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8032
CWE-79 Low
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 08.08.2018 SB2018080909
SB2018101810
SB2023021403
and 5 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042
CWE-79 Low
No
No
7.6.1.2.0.31 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU41375 - Improper input validation
CVE-2014-3596
CWE-20 Medium
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more


Showing elements 141 - 160 out of 159