Known vulnerabilities in IBM Maximo Scheduler Optimization 9.0.13

Vendor: IBM Corporation

Version: 9.0.13

Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_scheduler_optimization:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 5

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU127462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-41305	CWE-79	Medium	No	No	9.0.25, 9.1.14, 9.2.1	24.04.2026	SB2026042418 SB2026050801 SB2026060217 and 3 more
#VU126877 - Uncontrolled Recursion CVE-2026-41680	CWE-674	Medium	Public exploit available	No	9.0.24, 9.1.13	23.04.2026	SB2026042317 SB2026062221 SB2026062430 and 1 more
#VU126561 - Permissive List of Allowed Inputs CVE-2026-41240	CWE-183	Low	No	No	9.0.25, 9.1.14, 9.2.1	20.04.2026	SB2026041630 SB2026042938 SB2026060221 and 6 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-41239	CWE-79	Medium	No	No	9.0.25, 9.1.14, 9.2.1	20.04.2026	SB2026041630 SB2026042938 SB2026060221 and 5 more
#VU126559 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-41238	CWE-1321	Medium	No	No	9.0.25, 9.1.14, 9.2.1	20.04.2026	SB2026041630 SB2026042938 SB2026060221 and 4 more