2382 matches found
IBM Maximo Asset Management Information Disclosure - XML External Entity Injection
IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...
Maximo_Sql_Injection-CVE-2019-4650
This repository does not have a README...
Security Bulletin: Security Vulnerability identified in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF
Summary There is a vulnerability in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47857 DESCRIPTION: In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Servic...
Security Bulletin: Security Vulnerability identified in Spring - 6.2.19 used by IBM Maximo Application Suite - MREF
Summary There is a vulnerability in Spring-6.2.19 used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering,...
Security Bulletin: IBM Maximo Application Suite uses body-parser-1.20.5.tgz which is vulnerable to CVE-2026-12590
Summary IBM Maximo Application Suite uses body-parser-1.20.5.tgz which is vulnerable to CVE-2026-12590. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-12590 DESCRIPTION: Impact: In body-parser versions prior to 1.20.6 1.x line...
Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure
Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: IBM Maximo Application Suite 8.10...
EUVD-2026-97971
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
EUVD-2026-97975
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-97973
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...
EUVD-2026-97974
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
EUVD-2026-97972
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...
CVE-2026-90911
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-90912
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
CVE-2026-90921
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...
CVE-2026-90920
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation...
CVE-2026-92876
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...
CVE-2026-90911
The IBM Maximo AI Service (versions 9.1.0 and 9.2.0) is vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption (CWE-400). A remote attacker can exploit this flaw to exhaust system resources, potentially crashing the service. To remediate this vulnerability, IBM st...
CVE-2026-90911 Maximo AI Service Denial of Service
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...