Known vulnerabilities in Maximo Scheduler Optimizer

Known vulnerabilities in Maximo Scheduler Optimizer

Vendor: IBM Corporation

Software: Maximo Scheduler Optimizer

Software CPE: cpe:2.3:a:ibm_corporation:maximo_scheduler_optimizer:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 17

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU131921 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2026-40175	CWE-113	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	20.05.2026	SB2026052045 SB2026052051 SB2026052052 and 23 more
#VU128402 - Improper Encoding or Escaping of Output CVE-2026-34480	CWE-116	Medium	No	No	9.0.25, 9.1.14, 9.2.1	28.04.2026	SB20260428217 SB20260513128 SB2026052632 and 22 more
#VU128401 - Improper Encoding or Escaping of Output CVE-2026-34479	CWE-116	Medium	No	No	9.0.25, 9.1.14, 9.2.1	28.04.2026	SB20260428217 SB20260513128 SB2026052632 and 20 more
#VU128400 - Improper Output Neutralization for Logs CVE-2026-34478	CWE-117	Medium	No	No	9.0.25, 9.1.14, 9.2.1	28.04.2026	SB20260428217 SB2026052632 SB2026052731 and 19 more
#VU128399 - Improper Certificate Validation CVE-2026-34477	CWE-295	Medium	No	No	9.0.25, 9.1.14, 9.2.1	28.04.2026	SB20260428217 SB20260513128 SB2026052632 and 22 more
#VU128397 - Improper input validation CVE-2026-33750	CWE-20	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	28.04.2026	SB20260428215 SB20260428223 SB2026042934 and 9 more
#VU125981 - Exposure of sensitive information to an unauthorized actor CVE-2026-40895	CWE-200	Medium	No	No	9.0.25, 9.1.14, 9.2.1	14.04.2026	SB20260414106 SB2026062434 SB20260625284 and 19 more
#VU125804 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2026-2950	CWE-1321	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	10.04.2026	SB2026041094 SB2026042049 SB2026042720 and 17 more
#VU125803 - Improper Control of Generation of Code ('Code Injection') CVE-2026-4800	CWE-94	High	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	10.04.2026	SB2026041094 SB20260410101 SB20260410102 and 66 more
#VU125339 - Out-of-bounds read CVE-2026-39892	CWE-125	Low	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	08.04.2026	SB2026040897 SB20260408162 SB20260408163 and 16 more
#VU125338 - Improper Certificate Validation CVE-2026-34073	CWE-295	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	08.04.2026	SB2026040896 SB20260408119 SB20260408120 and 12 more
#VU124872 - Use of Cache Containing Sensitive Information CVE-2026-27205	CWE-524	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	06.04.2026	SB2026040613 SB2026040615 SB2026040617 and 14 more
#VU123140 - Inefficient Regular Expression Complexity CVE-2026-26996	CWE-1333	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	23.02.2026	SB2026022345 SB2026030633 SB2026032328 and 37 more
#VU123124 - Improper Handling of Windows Device Names CVE-2026-27199	CWE-67	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	23.02.2026	SB2026022322 SB2026030633 SB2026040615 and 10 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-13465	CWE-1321	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	22.01.2026	SB2026012209 SB2026012701 SB2026012744 and 72 more
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	9.0.25, 9.1.14, 9.2.1	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 102 more
#VU53202 - Command injection CVE-2021-23337	CWE-77	Medium	No	No	8.4.28, 8.5.28, 9.0.22, 9.1.11	12.05.2021	SB2021021525 SB2021051230 SB2021062703 and 62 more