Lucene search

K
IbmMaximo Application Suite

6 matches found

CVE
CVE
added 2024/04/06 12:15 p.m.92 views

CVE-2024-22328

IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 279950.

7.5CVSS7.3AI score0.00043EPSS
CVE
CVE
added 2022/05/03 7:15 p.m.81 views

CVE-2021-29854

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attack...

7.2CVSS6.7AI score0.00057EPSS
CVE
CVE
added 2022/09/14 5:15 p.m.55 views

CVE-2021-38924

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.

7.5CVSS7AI score0.00053EPSS
CVE
CVE
added 2024/09/07 2:15 p.m.49 views

CVE-2024-37068

IBM Maximo Application Suite - Manage Component 8.10, 8.11, and 9.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information using man in the middle techniques.

7.5CVSS5.8AI score0.00043EPSS
CVE
CVE
added 2023/02/17 6:15 p.m.45 views

CVE-2022-41734

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 237587.

7.5CVSS5.8AI score0.00019EPSS
CVE
CVE
added 2024/03/13 10:15 a.m.24 views

CVE-2023-32335

IBM Maximo Application Suite 8.10, 8.11 and IBM Maximo Asset Management 7.6.1.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 255075.

7.5CVSS3.6AI score0.00077EPSS