IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

Maximo_Sql_Injection-CVE-2019-4650

Este repositorio no tiene un README...

Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves.

Summary IBM Maximo Application Suite uses busboy 3.2.0, cryptography 46.0.7, browserslist 4.24.4, form-data 2.5.5, brace-expansion 1.1.14, socket.io-parser 4.2.6, fast-xml-parser 5.9.3, immutable 5.1.5, postcss 8.5.15, libarchive 3.5.3-9.el97, dompurify 3.4.0, ip-address 10.1.1, fast-uri 3.1.2,...

Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607

Summary IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607. This bulletin contains information regarding these vulnerabilities and their...

Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities

Summary IBM Maximo Manage application in IBM Maximo Application Suite uses uses httpcore5-h2-5.2.4.jar, browserslist-4.23.0.tgz, baseline-browser-mapping-2.10.13.tgz, fast-uri-3.1.5.tgz and fast-uri-3.1.6.tgz and is vulnerable to CVE-2026-54428, CVE-2026-54399, CVE-2026-73088, CVE-2026-45819,...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838

Summary IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Detai...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - IoT Component uses perl 0:5.32.1-481.1.el96, GO-2026-6061- go - google.golang.org/grpc/internal/transport :v1.82.0, nodejs - tar:7.5.19, bind 32:9.16.23-40.el98.2, cryptography 46.0.7, libarchive 3.5.3-9.el97 which is vulnerable to CVE-2023-47038,...

Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153.

Summary IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and...

Security Bulletin: IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010

Summary IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute afterSanitizeElemen...

Security Bulletin: IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844

Summary IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values durin...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...

Security Bulletin: : IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses Websphere application which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Monitor Component uses Websphere application which is vulnerable to CVE-2026-10842, CVE-2026-15057, CVE-2026-11897, CVE-2026-50645, CVE-2026-9322, CVE-2026-9171. This bulletin contains information addressing the vulnerability. Vulnerability Details...

Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029

Summary IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029 because of CR author can redirect arcgis-admin RoleBinding to own ServiceAccount, CR author can override...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205

Summary IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205, This bulletin contains information regarding the vulnerability and...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs.

Summary IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-67312 DESCRIPTION: axios...

Security Bulletin: Security Vulnerability identified in jsoup used by IBM Maximo Application Suite - MREF ( CVE-2026-75140 )

Summary There is a vulnerability in jsoup-1.23.1.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-75140 DESCRIPTION: jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-25526)

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite Vulnerability Details CVEID:CVE-2026-25526 DESCRIPTION: JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3,...

Security Bulletin: There are multiple security vulnerability in IBM Maximo Asset Management application

Summary There are multiple security vulnerability in IBM Maximo Asset Management application Vulnerability Details CVEID:CVE-2026-59901 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in...