Known vulnerabilities in IBM Maximo Asset Management - page 8

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_asset_management:*:*:*:*:*:*:*:*
Total vulnerabilities: 159
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Maximo Asset Management IBM Maximo Asset Management is affected by 159 known vulnerabilities: 2 critical, 14 high, 84 medium, 59 low Critical High Medium Low

Vulnerabilities (159)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106047 - Improper Neutralization of Formula Elements in a CSV File
CVE-2022-35281
CWE-1236 High
No
No
7.6.1.1.23, 7.6.1.2.28, 7.6.1.3.3 26.03.2025 SB2022110610
#VU81081 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20374
CWE-79 Medium
No
No
7.6.1.1.14, 7.6.1.2.8, 7.6.1.3.3 25.09.2023 SB2021122247
#VU72888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35645
CWE-79 Low
No
No
7.6.1.1.0.23, 7.6.1.2.0.30, 7.6.1.3.0.3 06.03.2023 SB2023030660
SB2023030706
#VU72146 - Improper input validation
CVE-2012-5784
CWE-20 Medium
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 13.02.2023 SB2023021403
SB2023061227
SB2024022640
and 3 more
#VU71715 - Deserialization of Untrusted Data
CVE-2023-23477
CWE-502 Critical
No
No
- 31.01.2023 SB2023013137
SB2023020111
SB2023020114
and 9 more
#VU67577 - Improper Authentication
CVE-2022-40616
CWE-287 Medium
No
No
- 22.09.2022 SB2022092218
#VU67576 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-40705
CWE-611 High
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 22.09.2022 SB2022092217
SB2023030205
SB2023030206
and 1 more
#VU66859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35714
CWE-79 Low
No
No
7.6.1.1.21, 7.6.1.2.13 30.08.2022 SB2022083029
#VU65835 - Incorrect Regular Expression
CVE-2022-31129
CWE-185 Medium
No
No
7.6.1.2.0.26, 7.6.1.3.0.1, 8.1.10, 9.0.6 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160
CWE-79 Low
No
No
7.6.1.2.0.30, 7.6.1.3.0.5 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
7.6.1.3.0.4 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU62600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22436
CWE-79 Low
No
No
- 26.04.2022 SB2022042618
#VU62599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22435
CWE-79 Low
No
No
- 26.04.2022 SB2022042618
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
7.6.1.2.0.26, 7.6.1.3.0.1, 8.1.10, 9.0.6 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-33813
CWE-611 Medium
No
No
- 29.03.2022 SB2021061628
SB2022032929
SB2022032930
and 39 more
#VU60729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23647
CWE-79 Low
No
No
7.6.1.2.0.30 21.02.2022 SB2022022105
SB2022100650
SB2022111738
and 1 more
#VU24468 - Improper input validation
CVE-2019-0227
CWE-20 Medium
Available
No
7.6.1.2.0.29, 7.6.1.3.0.4 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU14296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8032
CWE-79 Low
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 08.08.2018 SB2018080909
SB2018101810
SB2023021403
and 5 more
#VU41375 - Improper input validation
CVE-2014-3596
CWE-20 Medium
No
No
7.6.1.2.0.29, 7.6.1.3.0.4 27.08.2014 SB2014082703
SB2014091802
SB2023021403
and 5 more


Showing elements 141 - 160 out of 159