Known vulnerabilities in IBM Maximo Scheduler Optimization 9.2

Vendor: IBM Corporation
Software: IBM Maximo Scheduler Optimization
Version: 9.2
Software CPE: cpe:2.3:a:ibm_corporation:ibm_maximo_scheduler_optimization:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Maximo Scheduler Optimization version 9.2 IBM Maximo Scheduler Optimization 9.2 is affected by 4 vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU127462 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41305		 CWE-79 Medium
No
No
 9.0.25, 9.1.14, 9.2.1 24.04.2026 SB2026042418
SB2026050801
SB2026060217
and 3 more
#VU126561 - Permissive List of Allowed Inputs
CVE-2026-41240		 CWE-183 Low
No
No
 9.0.25, 9.1.14, 9.2.1 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 6 more
#VU126560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-41239		 CWE-79 Medium
No
No
 9.0.25, 9.1.14, 9.2.1 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 5 more
#VU126559 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2026-41238		 CWE-1321 Medium
No
No
 9.0.25, 9.1.14, 9.2.1 20.04.2026 SB2026041630
SB2026042938
SB2026060221
and 4 more