Known vulnerabilities in IBM Maximo Scheduler Optimization

Known vulnerabilities in IBM Maximo Scheduler Optimization

Vendor: IBM Corporation

Software: IBM Maximo Scheduler Optimization

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_scheduler_optimization:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 2

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU148847 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-69153	CWE-22	Medium	No	No	9.0.27, 9.1.16, 9.2.3	09.09.2026	SB2026090997 SB2026091015 SB2026100122 and 1 more
#VU144886 - Improper Validation of Certificate with Host Mismatch CVE-2026-71290	CWE-297	High	No	No	9.0.27, 9.1.16	24.08.2026	SB20260824163 SB2026090730 SB2026091582 and 3 more
#VU137374 - Improper Access Control CVE-2026-66010	CWE-284	Medium	No	No	9.0.27, 9.1.16, 9.2.23	13.07.2026	SB2026071311 SB2026091499 SB20260914100 and 4 more
#VU127462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-41305	CWE-79	Medium	No	No	9.0.25, 9.1.14, 9.2.1	24.04.2026	SB2026042418 SB2026050801 SB2026060217 and 5 more
#VU126877 - Uncontrolled Recursion CVE-2026-41680	CWE-674	Medium	Available	No	9.0.24, 9.1.13	23.04.2026	SB2026042317 SB2026062221 SB2026062430 and 2 more
#VU126856 - Inefficient Regular Expression Complexity CVE-2026-4867	CWE-1333	Low	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	22.04.2026	SB20260422207 SB20260422208 SB2026052938 and 9 more
#VU126561 - Permissive List of Allowed Inputs CVE-2026-41240	CWE-183	Low	No	No	9.0.25, 9.1.14, 9.2.1	20.04.2026	SB2026041630 SB2026042938 SB2026060221 and 11 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-41239	CWE-79	Medium	No	No	9.0.25, 9.1.14, 9.2.1	20.04.2026	SB2026041630 SB2026042938 SB2026060221 and 7 more
#VU126559 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-41238	CWE-1321	Medium	No	No	9.0.25, 9.1.14, 9.2.1	20.04.2026	SB2026041630 SB2026042938 SB2026060221 and 6 more
#VU125750 - Server-Side Request Forgery (SSRF) CVE-2025-62718	CWE-918	High	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	10.04.2026	SB2026041001 SB2026050419 SB2026050715 and 33 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	8.0.3	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 170 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	8.0.3	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 179 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	8.0.3	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 339 more