Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure

Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: IBM Maximo Application Suite 8.10...

IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

Maximo_Sql_Injection-CVE-2019-4650

This repository does not have a README...

Security Bulletin: IBM Maximo Application Suite - Manage Component uses nodejs and packages which are vulnerable to CVE-2026-111497

Summary IBM Maximo Application Suite - Manage Component uses nodejs and packages which are vulnerable to CVE-2026-111497. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-111497 DESCRIPTION: A buffer overflow vulnerability in...

Security Bulletin: IBM Maximo Application Suite uses Nodejs 24 which is vulnerable to CVE-2026-111497

Summary IBM Maximo Application Suite uses Nodejs 24 which is vulnerable to CVE-2026-111497. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-111497 DESCRIPTION: A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection Component uses packages which are vulnerable to CVE-2026-111497

Summary IBM Maximo Application Suite - Visual Inspection Component uses packages which are vulnerable to CVE-2026-111497, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-111497 DESCRIPTION: A buffer overflow vulnerability in...

Security Bulletin: IBM Maximo Application Suite uses brace-expansion-1.1.18.tgz which is vulnerable to CVE-2026-102276 / CVE-2026-102277 / CVE-2026-102278.

Summary IBM Maximo Application Suite uses brace-expansion-1.1.18.tgz which is vulnerable to CVE-2026-102276 / CVE-2026-102277 / CVE-2026-102278. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-102276 DESCRIPTION: The...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple Critical severity CVEs.

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple Critical severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-11525 DESCRIPTIO...

Security Bulletin: IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed below. This bulletin provides information about the affected components and the remediation for these vulnerabilities...

Security Bulletin: IBM Maximo Application Suite - Monitor component uses urllib3-2.7.0-py3-none-any.whl that are vulnerable to several security vulnerabilities CVE-2026-97687, CVE-2026-97688, CVE-2026-97689.

Summary IBM Maximo Application Suite - Monitor component uses urllib3-2.7.0-py3-none-any.whl that are vulnerable to several security vulnerabilities CVE-2026-97687, CVE-2026-97688, CVE-2026-97689. This bulletin provides information about the affected components and the remediation for these...

Security Bulletin: IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed below. This bulletin provides information about the affected components and the remediation for these vulnerabilities...

Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Predict Component uses IBM WebSphere Application Server Liberty , gnupg2 2.2.20-3.el86, platform-python 3.9.20-1.module+el8.10.0+22342+478c159e, platform-python 50.3.2-6.module+el8.10.0+22183+c898c0c1 , libarchive 3.5.3-9.el97 , platform-python...

Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Predict Component uses WebSphere Application Server Liberty is affected by a server-side request forgery, expat 2.2.5-15.el810, glib2 2.56.4-162.el8, gnutls 3.6.16-8.el810.4, krb5-devel 1.18.2-29.el810, python 3.10.6 , libxml2 2.9.7-18.el810.1, which are...

Security Bulletin:There are multiple vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-75595 DESCRIPTION: Netty is an asynchronous, event-driven networ...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs.

Summary Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dependencies which is vulnerable to multiple High severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-14673 DESCRIPTION:...

Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...

Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to multiple CVE

Summary IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to CVE-2026-88029, CVE-2026-17495, CVE-2026-96747, CVE-2026-96748, CVE-2026-96749,...

Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component uses pymongo-4.18.1 and is vulnerable to CVE-2026-96747, CVE-2026-96748, CVE-2026-96749

Summary IBM Maximo Application Suite - Location Service for Esri Component uses pymongo-4.18.1 and is vulnerable to CVE-2026-96747, CVE-2026-96748, CVE-2026-96749. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-96747...

Security Bulletin: IBM Maximo Application Suite uses vulnerable software versions of Java and NodeJs which is vulnerable to CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440, CVE-2026-56846, CVE-2026-56848, CVE-2026-58043

Summary IBM Maximo Application Suite uses vulnerable software versions of Java and NodeJs which is vulnerable to CVE-2026-70906, CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440, CVE-2026-56846, CVE-2026-56848, CVE-2026-58043. This bulletin contains information regarding the...