3583 matches found
Maximo_Sql_Injection-CVE-2019-4650
This repository does not have a README...
CVE-2020-4463
IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability CVE-2020-4463 IBM Maximo Asset Management is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...
Security Bulletin: IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777.
Summary IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializ...
Security Bulletin: IBM Maximo Application Suite uses jackson-core-2.18.10.jar which is vulnerable to CVE-2026-89407, CVE-2026-89425.
Summary IBM Maximo Application Suite uses jackson-core-2.18.10.jar which is vulnerable to CVE-2026-89407, CVE-2026-89425. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-89407 DESCRIPTION: NumberInput.looksLikeValidNumber in...
Security Bulletin: IBM Maximo Application Suite uses braces-3.0.3.tgz which is vulnerable to CVE-2026-93687.
Summary IBM Maximo Application Suite uses braces-3.0.3.tgz which is vulnerable to CVE-2026-93687. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-93687 DESCRIPTION: braces through 3.0.3 contains a stack overflow vulnerability in...
Security Bulletin: IBM Maximo Application Suite uses braces-3.0.3.tgz which is vulnerable to CVE-2026-93687.
Summary IBM Maximo Application Suite uses braces-3.0.3.tgz which is vulnerable to CVE-2026-93687. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-93687 DESCRIPTION: braces through 3.0.3 contains a stack overflow vulnerability in...
Security Bulletin: IBM Maximo Application Suite uses mongo-java-driver-3.12.14.jar which is vulnerable to CVE-2026-88033
Summary IBM Maximo Application Suite uses mongo-java-driver-3.12.14.jar which is vulnerable to CVE-2026-88033. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-88033 DESCRIPTION: Improper neutralization of special elements in dat...
IBM Maximo Asset Management Information Disclosure - XML External Entity Injection
IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...
Security Bulletin: IBM Maximo Application Suite uses freemarker-2.3.30.jar which is vulnerable to CVE-2026-84939
Summary IBM Maximo Application Suite uses freemarker-2.3.30.jar which is vulnerable to CVE-2026-84939. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-84939 DESCRIPTION: Path traversal vulnerability in Apache FreeMarker template...
Security Bulletin: Security Vulnerability identified in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF
Summary There is a vulnerability in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47857 DESCRIPTION: In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Servic...
Security Bulletin: Security Vulnerability identified in Spring - 6.2.19 used by IBM Maximo Application Suite - MREF
Summary There is a vulnerability in Spring-6.2.19 used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering,...
Security Bulletin: IBM Maximo Application Suite uses body-parser-1.20.5.tgz which is vulnerable to CVE-2026-12590
Summary IBM Maximo Application Suite uses body-parser-1.20.5.tgz which is vulnerable to CVE-2026-12590. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6 1.x line...
Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure
Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: IBM Maximo Application Suite 8.10...
EUVD-2026-97975
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-97973
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...
EUVD-2026-97974
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
EUVD-2026-97972
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...
EUVD-2026-97971
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
