Skip to content
Ibm Maximo vulnerabilities
-
ibm maximo ai service
Maximo AI Service Denial of Service
CVE-2026-90911
7.5 High
-
ibm maximo ai service
Maximo AI Service Denial of Service
CVE-2026-90912
7.5 High
-
ibm maximo ai service
Maximo AI Service Code Injection
CVE-2026-90920
9.8 Critical
-
ibm maximo ai service
Maximo AI Service Denial of Service
CVE-2026-90921
7.5 High
-
ibm maximo application suite - iot component
IBM Maximo Application Suite - IoT Component Denial of Service
CVE-2026-92876
7.5 High
-
ibm maximo application suite - location service for esri component
IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management
CVE-2026-18513
7.2 High
-
ibm maximo application suite - location service for esri component
IBM Maximo Application Suite - Location Service for Esri Component Improper Access Control
CVE-2026-18517
7.7 High
-
ibm maximo application suite - location service for esri component
IBM Maximo Application Suite - Location Service for Esri Component Code Execution
CVE-2026-18529
8.7 High
-
ibm maximo application suite - location service for esri component
IBM Maximo Application Suite - Location Service for Esri Component Code Execution
CVE-2026-18533
6.5 Medium
-
ibm maximo application suite - location service for esri component
IBM Maximo Application Suite - Location Service for Esri Component Code Execution
CVE-2026-18537
8.7 High
-
ibm maximo application suite - iot component
IBM Maximo Application Suite - IoT Component Denial of Service
CVE-2026-75881
7.5 High
-
ibm maximo ai service
Maximo AI Service Improper Input Validation
CVE-2026-78673
7.5 High
-
ibm maximo application suite
IBM Maximo Application Suite Information Disclosure
CVE-2026-105052
7.5 High
-
ibm maximo application suite
IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak H…
CVE-2026-15656
4.3 Medium
-
ibm maximo application suite
IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak H…
CVE-2026-18531
5.3 Medium
-
ibm maximo application suite
IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag
CVE-2026-4820
4.3 Medium
-
ibm maximo application suite - monitor component, maximo application suite +1 more
IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .
CVE-2025-14684
4.0 Medium
-
ibm maximo application suite
There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics
CVE-2025-36386
9.8 Critical
-
ibm maximo application suite
IBM Maximo Application Suite privilege escalation
CVE-2025-2898
7.5 High
-
ibm maximo asset management
IBM Maximo Asset Management cross-site scripting
CVE-2025-2986
5.5 Medium
-
ibm maximo asset management
IBM Maximo Asset Management server-side request forgery
CVE-2025-2987
3.8 Low
-
ibm maximo application suite
IBM Maximo Application Suite improper access control
CVE-2023-43037
6.5 Medium
-
ibm maximo application suite
IBM Maximo Application Suite file upload
CVE-2025-1500
5.5 Medium
-
ibm maximo application suite
IBM Maximo Application Suite log manipulation
CVE-2024-35150
5.3 Medium
-
ibm maximo application suite
IBM Maximo Application Suite SQL injection
CVE-2024-35148
6.3 Medium
-
ibm maximo application suite
IBM Maximo Application Suite information disclosure
CVE-2024-35144
5.3 Medium
-
ibm maximo application suite
IBM Maximo Application Suite cross-site scripting
CVE-2024-35145
6.1 Medium
-
ibm maximo asset management
IBM Maximo Asset Management file upload
CVE-2024-45077
6.5 Medium
-
ibm maximo asset management
IBM Maximo Asset Management directory traversal
CVE-2024-45652
6.5 Medium
-
ibm maximo asset management
IBM Maximo Asset Management cross-site scripting
CVE-2024-45088
6.4 Medium
-
ibm maximo application suite
IBM Maximo Application Suite cross-site scripting
CVE-2024-35146
5.4 Medium
-
ibm maximo application suite - monitor component, maximo application suite +1 more
IBM Maximo Application Suite - Monitor Component information disclosure
CVE-2024-38314
5.9 Medium
-
ibm maximo application suite
IBM Maximo Application Suite information disclosure
CVE-2024-37068
5.9 Medium
-
ibm maximo application suite, maximo asset management +1 more
IBM Maximo Application Suite information disclosure
CVE-2024-22333
3.3 Low
-
ibm maximo application suite
IBM Maximo Application Suite information disclosure
CVE-2024-22328
7.5 High
-
ibm maximo application suite, maximo asset management +1 more
IBM Maximo Application Suite XML external entity injection
CVE-2024-27266
8.2 High
-
ibm maximo application suite, maximo asset management +1 more
IBM Maximo Application Suite information disclosure
CVE-2023-32335
3.7 Low
-
ibm maximo application suite - maximo mobile for eam, maximo mobile for eam +1 more
IBM Maximo Application Suite information disclosure
CVE-2023-43043
5.1 Medium
-
ibm maximo asset management, maximo application suite +1 more
Maximo Asset Management cross-site scripting
CVE-2023-38723
6.4 Medium
-
ibm maximo asset management
IBM Maximo Asset Management improper access control
CVE-2023-32333
6.5 Medium
-
ibm maximo spatial asset management, maximo application suite, maximo asset management +2 more
IBM Maximo Spatial Asset Management server-side request forgery
CVE-2023-32337
5.4 Medium
-
ibm maximo asset management, maximo asset management manage component, maximo application suite +2 more
IBM Maximo Asset Management cross-site request forgery
CVE-2023-47718
4.3 Medium
-
ibm maximo application suite, maximo asset management +1 more
IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection
CVE-2023-32332
5.4 Medium
-
ibm maximo application suite, maximo asset management +1 more
IBM Maximo Asset Management information disclosure
CVE-2023-32334
3.7 Low
-
ibm maximo application suite
IBM Maximo Application Suite information disclosure
CVE-2023-27861
5.9 Medium
-
ibm maximo asset management
IBM Maximo Asset Management cross-site scripting
CVE-2022-43866
5.4 Medium
-
ibm maximo asset management
IBM Maximo Asset Management HTML injection
CVE-2023-27864
5.4 Medium
-
ibm maximo asset management
IBM Maximo Asset Management information disclosure
CVE-2023-27860
5.3 Medium
-
ibm maximo application suite, maximo asset management +1 more
IBM Maximo Asset Management cross-site scripting
CVE-2022-35645
6.4 Medium
-
ibm maximo application suite
IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could...
CVE-2022-43923
6.2 Medium
- Show olderLoading…