3301 matches found
IBM Maximo Asset Management Information Disclosure - XML External Entity Injection
IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...
Maximo_Sql_Injection-CVE-2019-4650
이 저장소에는 README가 없습니다...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses netty-handler-4.1.135.Final.jar, ion-java-1.11.1.jar, js-yaml-4.3.0.tgz, tar-7.5.20.tgz, python3.12 3.12.13-3.el98, github.com/go-jose/go-jose/v4 v4.1.3, github.com/apache/thrift v0.22.0, and google.golang.org/grpc 1.71.0 which are vulnerable to CVE-2026-62243,...
CVE-2020-4463
IBM Maximo Asset Management は、XXE 脆弱性 CVE-2020-4463 による情報漏えいに対して脆弱です IBM Maximo Asset Management は、XML データを処理する際に XML 外部エンティティインジェクション XXE 攻撃に対して脆弱です。リモートの攻撃者がこの脆弱性を悪用して、機密情報を公開したり、メモリリソースを消費させたりする可能性があります。 基本スコア: 8.2 ベクター: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L 影響を受けるコアコンポーネント IBM Maximo...
Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves.
Summary IBM Maximo Application Suite uses busboy 3.2.0, cryptography 46.0.7, browserslist 4.24.4, form-data 2.5.5, brace-expansion 1.1.14, socket.io-parser 4.2.6, fast-xml-parser 5.9.3, immutable 5.1.5, postcss 8.5.15, libarchive 3.5.3-9.el97, dompurify 3.4.0, ip-address 10.1.1, fast-uri 3.1.2,...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses tomcat-embed-websocket-10.1.57.jar and logback-classic-1.5.35.jar which are vulnerable to CVE-2026-73180 and CVE-2026-19880. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-19880 DESCRIPTION:...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607
Summary IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607. This bulletin contains information regarding these vulnerabilities and their...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities
Summary IBM Maximo Manage application in IBM Maximo Application Suite uses uses httpcore5-h2-5.2.4.jar, browserslist-4.23.0.tgz, baseline-browser-mapping-2.10.13.tgz, fast-uri-3.1.5.tgz and fast-uri-3.1.6.tgz and is vulnerable to CVE-2026-54428, CVE-2026-54399, CVE-2026-73088, CVE-2026-45819,...
Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838
Summary IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Detai...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses github.com/aws/aws-sdk-go-v2/service/s3 v1.96.2, github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.50.2, github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.5, tar 7.5.19, libsolv 0.7.24-5.el98, compat-openssl11 1:1.1.1k-5.el98.3, sigstore 2.3.1, and dif...
Security Bulletin: Maximo AI Service uses client-java-21.0.0.jar which is vulnerable to CVE-2026-15687.
Summary Maximo AI Service uses client-java-21.0.0.jar which is vulnerable to CVE-2026-15687. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-15687 DESCRIPTION: A security issue was discovered in the Kubernetes Java client librar...
Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - IoT Component uses perl 0:5.32.1-481.1.el96, GO-2026-6061- go - google.golang.org/grpc/internal/transport :v1.82.0, nodejs - tar:7.5.19, bind 32:9.16.23-40.el98.2, cryptography 46.0.7, libarchive 3.5.3-9.el97 which is vulnerable to CVE-2023-47038,...
Security Bulletin: IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153.
Summary IBM Maximo Application Suite uses postcss-8.5.10.tgz which is vulnerable to CVE-2026-69153. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-69153 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze and...
Security Bulletin: IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010
Summary IBM Maximo Application Suite uses dompurify-3.4.7.tgz which is vulnerable to CVE-2026-66010. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute afterSanitizeElemen...
Security Bulletin: IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844
Summary IBM Maximo Application Suite uses log4j-api-2.25.4.jar which is vulnerable to CVE-2026-49844. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values durin...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...
Security Bulletin: : IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed in the Vulnerability Details section below. This bulletin provides information about the affected components and the...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses Websphere application which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor Component uses Websphere application which is vulnerable to CVE-2026-10842, CVE-2026-15057, CVE-2026-11897, CVE-2026-50645, CVE-2026-9322, CVE-2026-9171. This bulletin contains information addressing the vulnerability. Vulnerability Details...
Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029
Summary IBM Maximo Application Suite - Location Service for Esri Component is vulnerable to CVE-2026-18513, CVE-2026-18537, CVE-2026-18529, CVE-2026-18533, CVE-2026-18517 and CVE-2026-88029 because of CR author can redirect arcgis-admin RoleBinding to own ServiceAccount, CR author can override...