Lucene search

K
IbmMaximo Application Suite

7 matches found

CVE
CVE
added 2025/01/25 3:15 p.m.73 views

CVE-2024-35145

IBM Maximo Application Suite 9.0.0 - Monitor Component is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

6.1CVSS6.1AI score0.00078EPSS
CVE
CVE
added 2023/03/02 9:15 p.m.67 views

CVE-2022-35645

IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...

6.4CVSS5.3AI score0.00079EPSS
CVE
CVE
added 2022/11/28 5:15 p.m.51 views

CVE-2022-41732

IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407.

6.2CVSS5.3AI score0.00018EPSS
CVE
CVE
added 2023/02/24 3:15 p.m.41 views

CVE-2022-43923

IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user. IBM X-Force ID: 241584.

6.2CVSS5AI score0.00022EPSS
CVE
CVE
added 2025/04/10 2:15 p.m.40 views

CVE-2023-43037

IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to improper input validation.

6.5CVSS6.3AI score0.00062EPSS
CVE
CVE
added 2024/03/13 10:15 a.m.38 views

CVE-2023-38723

IBM Maximo Application Suite 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 262192...

6.4CVSS5.8AI score0.00068EPSS
CVE
CVE
added 2021/08/30 5:15 p.m.37 views

CVE-2021-29743

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

6.4CVSS5.2AI score0.00204EPSS