Lucene search
+L

950 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/10 7:11 a.m.•10 views

Security Bulletin: There is a vulnerability in netty-codec-http-4.1.115.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-58056)

Summary There is a vulnerability in netty-codec-http-4.1.115.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2025-58056 DESCRIPTION: Netty is an asynchronous event-driven network application framework for development of maintainable...

7.5CVSS6.6AI score0.00677EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/03 9:06 a.m.•71 views

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.

Summary IBM Maximo Application Suite uses "form-data 4.0.0, org.apache.cxfcxf-core 3.6.7 , net/http/internal v1.24.1, braces 3.0.2 , cross-spawn 7.0.3 , crypto/x509 1.24.1 1.24.3 , github.com/golang-jwt/jwt/v4 github.com/golang-jwt/jwt/v5 v4.5.0 v5.2.1 , httpd 2.4.37 , setuptools 78.0.2 75.8.0 ,...

9.8CVSS7AI score0.91327EPSS
SaveExploits10Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/03 8:54 a.m.•33 views

Security Bulletin: IBM Maximo Application Suite uses multiple third party libraries which is vulnerable to multiple CVEs

Summary IBM Maximo Application Suite uses setuptools 76.1.0, urllib3-1.26.20-py2.py3-none-any.whl, cross-spawn v7.0.3, braces v3.0.2, axios-1.11.0.tgz, xmltodict-0.14.2-py2.py3-none-any.whl, WebSphere Application Server Liberty version 25.0.0.8 which is vulnerable to CVE-2025-47273, CVE-2025-5018...

8.7CVSS7AI score0.32964EPSS
SaveExploits4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/29 4:04 p.m.•15 views

CVE-2025-36386

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application...

9.8CVSS7AI score0.00554EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/28 6:30 p.m.•15 views

EUVD-2025-36540

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application...

9.8CVSS6.5AI score0.00554EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/28 3:56 p.m.•10 views

CVE-2025-36386 There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application...

9.8CVSS8.1AI score0.00554EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/28 3:56 p.m.•31 views

CVE-2025-36386 There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application...

9.8CVSS0.00554EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/28 11:19 a.m.•18 views

Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting.

Summary Security Bulletin: IBM Maximo Application Suite Predict Component uses IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

4.8CVSS5.9AI score0.00177EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/28 5:54 a.m.•13 views

Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Spring Framework MVC applications can be vulnerable to Traversal Vulnerability.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Spring Framework MVC applications can be vulnerable to Traversal Vulnerability.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-41242 DESCRIPTION:...

5.9CVSS6.8AI score0.02127EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•23 views

PT-2025-44191

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite versions 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 Description The software contains a flaw that allows a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application...

10CVSS8AI score0.00554EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/28 12:00 a.m.•5 views

CVE-2025-36386: Authentication Bypass by Primary Weakness

IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain unauthorized access to the application...

9.8CVSS8.3AI score0.00554EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/28 12:00 a.m.•22 views

IBM Maximo Application Suite 安全漏洞

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. A security vulnerability exists in IBM Maximo Application Suite versions 9.0.15 and earlier and 9.1.4 an...

9.8CVSS6.4AI score0.00554EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/09 2:27 p.m.•17 views

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses xmldom-0.8.10.tgz which is vulnerable to this CVE-2021-32796 Vulnerability Details CVEID:CVE-2021-32796 DESCRIPTION: xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParse...

6.5CVSS6.3AI score0.01358EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/09 2:25 p.m.•27 views

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses flask-3.1.0-py3-none-any.whl which is vulnerable to this CVE-2025-47278

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses flask-3.1.0-py3-none-any.whl which is vulnerable to this CVE-2025-47278 Vulnerability Details CVEID:CVE-2025-47278 DESCRIPTION: Flask is a web server gateway interface WSGI web application framework. In Fla...

1.8CVSS6.1AI score0.0019EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/09 6:33 a.m.•10 views

Security Bulletin: WebSphere Application Server Liberty could allow a remote attacker to bypass security restrictions (CVE-2024-56339)

Summary WebSphere Application Server Liberty could allow a remote attacker to bypass security restrictions Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker ...

7.5CVSS6.7AI score0.00419EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2001-1054

Malware in sbrugna...

5CVSS6.4AI score0.01697EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-36410

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00247EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2023-31596

Malicious code in bioql PyPI...

5.9CVSS6AI score0.00338EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-35564

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00359EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-37262

Malicious code in bioql PyPI...

5.9CVSS6AI score0.0031EPSS
SaveExploits0References1
Rows per page
Query Builder