721 matches found
Security Bulletin: IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities.
Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed below. This bulletin provides information about the affected components and the remediation for these vulnerabilities...
Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Predict Component uses IBM WebSphere Application Server Liberty , gnupg2 2.2.20-3.el86, platform-python 3.9.20-1.module+el8.10.0+22342+478c159e, platform-python 50.3.2-6.module+el8.10.0+22183+c898c0c1 , libarchive 3.5.3-9.el97 , platform-python...
Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Predict Component uses WebSphere Application Server Liberty is affected by a server-side request forgery, expat 2.2.5-15.el810, glib2 2.56.4-162.el8, gnutls 3.6.16-8.el810.4, krb5-devel 1.18.2-29.el810, python 3.10.6 , libxml2 2.9.7-18.el810.1, which are...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs.
Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-14673 DESCRIPTION:...
Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite
Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...
Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite
Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...
Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to multiple CVE
Summary IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to CVE-2026-88029, CVE-2026-17495, CVE-2026-96747, CVE-2026-96748, CVE-2026-96749,...
Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component uses pymongo-4.18.1 and is vulnerable to CVE-2026-96747, CVE-2026-96748, CVE-2026-96749
Summary IBM Maximo Application Suite - Location Service for Esri Component uses pymongo-4.18.1 and is vulnerable to CVE-2026-96747, CVE-2026-96748, CVE-2026-96749. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-96747...
Security Bulletin: IBM Maximo Application Suite uses vulnerable software versions of Java and NodeJs which is vulnerable to CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440, CVE-2026-56846, CVE-2026-56848, CVE-2026-58043
Summary IBM Maximo Application Suite uses vulnerable software versions of Java and NodeJs which is vulnerable to CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440, CVE-2026-56846, CVE-2026-56848, CVE-2026-58043. This bulletin contains information regarding the...
Security Bulletin: IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777.
Summary IBM Maximo Application Suite uses jackson-databind-2.18.10.jar which is vulnerable to CVE-2026-91776, CVE-2026-91777. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializ...
Security Bulletin: IBM Maximo Application Suite uses jackson-core-2.18.10.jar which is vulnerable to CVE-2026-89407, CVE-2026-89425.
Summary IBM Maximo Application Suite uses jackson-core-2.18.10.jar which is vulnerable to CVE-2026-89407, CVE-2026-89425. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-89407 DESCRIPTION: NumberInput.looksLikeValidNumber in...
Security Bulletin: Security Vulnerability identified in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF
Summary There is a vulnerability in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47857 DESCRIPTION: In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Servic...
Security Bulletin: Security Vulnerability identified in Spring - 6.2.19 used by IBM Maximo Application Suite - MREF
Summary There is a vulnerability in Spring-6.2.19 used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering,...
Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure
Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: IBM Maximo Application Suite 8.10...
EUVD-2026-97971
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
CVE-2026-92876
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
CVE-2026-92876 IBM Maximo Application Suite - IoT Component Denial of Service
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
CVE-2026-92876 IBM Maximo Application Suite - IoT Component Denial of Service
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
CVE-2026-92876
The IBM Maximo Application Suite - IoT Component versions 9.2.0 , 9.1.0 , and 9.0.0 are vulnerable to a Denial of Service (DoS) attack. The root cause is identified as uncontrolled recursion (CWE-674), which can be triggered by a remote attacker over the network. The vulnerability results in a hi...