80 matches found
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses js-yaml-4.1.1.tgz which is vulnerable to CVE-2026-53550, CVE-2026-59869. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-53550 DESCRIPTION: js-yaml is a JavaScript YAML parser and...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses postcss-8.4.38.tgz package which is vulnerable to CVE-2026-45623.
Summary IBM Maximo Application Suite - Monitor Component uses postcss-8.4.38.tgz which is vulnerable to CVE-2026-45623. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-45623 DESCRIPTION: PostCSS takes a CSS file and provides an API to analyze...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses WebSphere Application Server Liberty which is vulnerable to CVE-2026-5516, CVE-2026-4410. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-5516 DESCRIPTION: IBM WebSphere Application...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses ws-7.5.11.tgz which is vulnerable to CVE-2026-62389.
Summary IBM Maximo Application Suite - Monitor Component uses ws-7.5.11.tgz which is vulnerable to CVE-2026-62389. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor Component uses ip-address-9.0.5.tgz, postcss-8.4.38.tgz, postcss-8.4.48.tgz, postcss-8.5.6.tgz, requests-2.32.4-py3-none-any.whl, requests-2.32.5-py3-none-any.whl which are vulnerable to CVE-2026-42338, CVE-2026-41305, CVE-2026-25645. This bulletin...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses dompurify-3.4.8.tgz which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses dompurify-3.4.8.tgz which is vulnerable to CVE-2026-65898, CVE-2026-65899. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-65898 DESCRIPTION: DOMPurify before 3.4.11 fails to clone...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed below in the Vulnerability Details section. This bulletin provides information about the affected components and the...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257.
Summary IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7 is vulnerable to...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244.
Summary IBM Maximo Application Suite - Monitor component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-39244 DESCRIPTION: adm-zip before 0.5.18 is vulnerable to denial of service...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor Component uses HdrHistogram-2.2.2.jar, logback-core-1.5.32.jar which are vulnerable to CVE-2026-14683, CVE-2026-14684, CVE-2026-14685, CVE-2026-14686, CVE-2026-10532 and CVE-2026-9828. Vulnerability Details CVEID:CVE-2026-10532 DESCRIPTION:...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which could provide weaker than expected security, is affected by a privilege escalation vulnerability and server-side request forgery, requests-2.32.4-py3-none-any.whl which are vulnerable to...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty was affected by a prototype pollution vulnerability due to immutable (CVE-2026-29063)
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty was affected by prototype pollution vulnerability due to immutable CVE-2026-29063. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability...
Security Bulletin: IBM Edge Data Collector uses follow-redirects-1.15.11.tgz which is vulnerable to CVE-2026-40895
Summary IBM Edge Data Collector Component uses follow-redirects-1.15.11.tgz which is vulnerable to CVE-2026-40895. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in replacement for...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses protobuf-4.21.12-cp37-abi3-manylinux2014_x86_64.whl and protobuf-4.25.7-cp37-abi3-manylinux2014_x86_64.whl which is vulnerable to CVE-2025-4565
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses protobuf-4.21.12-cp37-abi3-manylinux2014x8664.whl and protobuf-4.25.7-cp37-abi3-manylinux2014x8664.whl which is vulnerable to CVE-2025-4565.This bulletin contains information addressing the vulnerability. Vulnerabili...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses protobuf-4.25.3-cp37-abi3-manylinux2014_x86_64.whl, protobuf-6.33.4-cp39-abi3-manylinux2014_x86_64.whl which is vulnerable to CVE-2026-0994
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses Security Bulletin: IBM Maximo Application Suite - Monitor Component uses protobuf-4.25.3-cp37-abi3-manylinux2014x8664.whl, protobuf-6.33.4-cp39-abi3-manylinux2014x8664.whl which is vulnerable to CVE-2026-0994.This...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses netty-codec-http2-4.2.10.Final.jar, netty-codec-http2-4.2.9.Final.jar which is vulnerable to CVE-2026-33871
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses netty-codec-http2-4.2.10.Final.jar, netty-codec-http2-4.2.9.Final.jar which is vulnerable to CVE-2026-33871.This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-33871...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses netty-codec-http-4.2.9.Final.jar which is vulnerable to CVE-2026-33870
Summary IBM Maximo Application Suite - Monitor Component uses netty-codec-http-4.2.9.Final.jar which is vulnerable to CVE-2026-33870.This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-33870 DESCRIPTION: Netty is an asynchronous, event-driven...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses tornado-6.5.3-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2026-31958
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses tornado-6.5.3-cp39-abi3-manylinux25x8664.manylinux1x8664.manylinux217x8664.manylinux2014x8664.whl which is vulnerable to CVE-2026-31958. This bulletin contains information addressing the vulnerability. Vulnerability...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses path-to-regexp-0.1.12.tgz which is vulnerable to CVE-2026-4867
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses path-to-regexp-0.1.12.tgz which is vulnerable to CVE-2026-4867.This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-4867 DESCRIPTION: Impact: A bad regular expression ...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037
Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses axios-1.15.0.tgz which is vulnerable to CVE-2026-42033, CVE-2026-42034, CVE-2026-42035, CVE-2026-42036, CVE-2026-42037, CVE-2026-42038, CVE-2026-42039, CVE-2026-42040, CVE-2026-42041, CVE-2026-42042, CVE-2026-42043,...