Ibm Maximo Application Suite vulnerabilities

• ibm maximo application suite IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak H… CVE-2026-15656 4.3 MediumAugust 5, 2026
• ibm maximo application suite IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak H… CVE-2026-18531 5.3 MediumAugust 5, 2026
• ibm maximo application suite IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag CVE-2026-4820 4.3 MediumApril 1, 2026
• ibm maximo application suite - monitor component, maximo application suite +1 more IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to . CVE-2025-14684 4.0 MediumMarch 25, 2026
• ibm maximo application suite There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics CVE-2025-36386 9.8 CriticalOctober 28, 2025
• ibm maximo application suite IBM Maximo Application Suite privilege escalation CVE-2025-2898 7.5 HighMay 6, 2025
• ibm maximo application suite IBM Maximo Application Suite improper access control CVE-2023-43037 6.5 MediumApril 10, 2025
• ibm maximo application suite IBM Maximo Application Suite file upload CVE-2025-1500 5.5 MediumApril 5, 2025
• ibm maximo application suite IBM Maximo Application Suite log manipulation CVE-2024-35150 5.3 MediumJanuary 25, 2025
• ibm maximo application suite IBM Maximo Application Suite SQL injection CVE-2024-35148 6.3 MediumJanuary 25, 2025
• ibm maximo application suite IBM Maximo Application Suite information disclosure CVE-2024-35144 5.3 MediumJanuary 25, 2025
• ibm maximo application suite IBM Maximo Application Suite cross-site scripting CVE-2024-35145 6.1 MediumJanuary 25, 2025
• ibm maximo application suite IBM Maximo Application Suite cross-site scripting CVE-2024-35146 5.4 MediumNovember 6, 2024
• ibm maximo application suite - monitor component, maximo application suite +1 more IBM Maximo Application Suite - Monitor Component information disclosure CVE-2024-38314 5.9 MediumOctober 24, 2024
• ibm maximo application suite IBM Maximo Application Suite information disclosure CVE-2024-37068 5.9 MediumSeptember 7, 2024
• ibm maximo application suite, maximo asset management +1 more IBM Maximo Application Suite information disclosure CVE-2024-22333 3.3 LowJune 13, 2024
• ibm maximo application suite IBM Maximo Application Suite information disclosure CVE-2024-22328 7.5 HighApril 6, 2024
• ibm maximo application suite, maximo asset management +1 more IBM Maximo Application Suite XML external entity injection CVE-2024-27266 8.2 HighMarch 14, 2024
• ibm maximo application suite, maximo asset management +1 more IBM Maximo Application Suite information disclosure CVE-2023-32335 3.7 LowMarch 13, 2024
• ibm maximo asset management, maximo application suite +1 more Maximo Asset Management cross-site scripting CVE-2023-38723 6.4 MediumMarch 13, 2024
• ibm maximo spatial asset management, maximo application suite, maximo asset management +2 more IBM Maximo Spatial Asset Management server-side request forgery CVE-2023-32337 5.4 MediumJanuary 19, 2024
• ibm maximo asset management, maximo asset management manage component, maximo application suite +2 more IBM Maximo Asset Management cross-site request forgery CVE-2023-47718 4.3 MediumJanuary 19, 2024
• ibm maximo application suite, maximo asset management +1 more IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection CVE-2023-32332 5.4 MediumSeptember 8, 2023
• ibm maximo application suite, maximo asset management +1 more IBM Maximo Asset Management information disclosure CVE-2023-32334 3.7 LowJune 5, 2023
• ibm maximo application suite IBM Maximo Application Suite information disclosure CVE-2023-27861 5.9 MediumJune 5, 2023
• ibm maximo application suite, maximo asset management +1 more IBM Maximo Asset Management cross-site scripting CVE-2022-35645 6.4 MediumMarch 2, 2023
• ibm maximo application suite IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could... CVE-2022-43923 6.2 MediumFebruary 24, 2023
• ibm maximo asset management, maximo application suite +1 more IBM Maximo Asset Management information disclosure CVE-2022-41734 5.3 MediumFebruary 17, 2023
• ibm maximo asset management, maximo manage, maximo application suite +2 more IBM Maximo Application Suite command injection CVE-2022-35281 5.5 MediumJanuary 6, 2023
• ibm maximo mobile, maximo application suite +1 more IBM Maximo information disclosure CVE-2022-41732 6.2 MediumNovember 28, 2022
• ibm maximo asset management, maximo application suite +1 more IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive... CVE-2021-38924 5.3 MediumSeptember 14, 2022
• ibm maximo asset management, maximo application suite +1 more IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by... CVE-2021-29854 5.4 MediumMay 3, 2022
• ibm maximo asset management, maximo application suite +1 more IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This... CVE-2021-29743 6.4 MediumAugust 30, 2021
• ibm maximo asset management, maximo application suite +1 more IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This... CVE-2021-29744 5.4 MediumAugust 27, 2021