IBM Maximo Application Suite

CVE-2026-105052 High 7.5 IBM Maximo Application Suite Information Disclosure 0.4%
CVE-2026-15656 Medium 4.3 IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret 0.2%
CVE-2026-18531 Medium 5.3 IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret 0.4%
CVE-2026-4820 Medium 4.3 IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag 0.1%
CVE-2025-2898 High 7.5 IBM Maximo Application Suite privilege escalation 0.3%
CVE-2023-43037 Medium 6.5 IBM Maximo Application Suite improper access control 0.3%
CVE-2025-1500 Medium 5.5 IBM Maximo Application Suite file upload 0.3%
CVE-2024-35150 Medium 5.3 IBM Maximo Application Suite log manipulation 0.3%
CVE-2024-35148 Medium 6.3 IBM Maximo Application Suite SQL injection 0.4%
CVE-2024-35144 Medium 5.3 IBM Maximo Application Suite information disclosure 0.3%
CVE-2024-35145 Medium 6.1 IBM Maximo Application Suite cross-site scripting 0.3%
CVE-2024-35146 Medium 5.4 IBM Maximo Application Suite cross-site scripting 0.3%
CVE-2024-37068 Medium 5.9 IBM Maximo Application Suite information disclosure 0.2%
CVE-2024-22333 Low 3.3 IBM Maximo Application Suite information disclosure 0.2%
CVE-2024-22328 High 7.5 IBM Maximo Application Suite information disclosure 0.8%
CVE-2023-32335 Low 3.7 IBM Maximo Application Suite information disclosure 0.5%
CVE-2023-32332 Medium 5.4 IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection 0.6%
CVE-2023-32334 Low 3.7 IBM Maximo Asset Management information disclosure 0.6%
CVE-2023-27861 Medium 5.9 IBM Maximo Application Suite information disclosure 0.3%
CVE-2022-35645 Medium 6.4 IBM Maximo Asset Management cross-site scripting 0.5%
CVE-2022-43923 Medium 6.2 IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user. IBM X-Force ID: 241584. 0.2%